Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-32693
HistoryJun 17, 2021 - 12:00 a.m.

CVE-2021-32693

2021-06-1700:00:00
ubuntu.com
ubuntu.com
11

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

56.9%

Symfony is a PHP framework for web and console applications and a set of
reusable PHP components. A vulnerability related to firewall authentication
is in Symfony starting with version 5.3.0 and prior to 5.3.2. When an
application defines multiple firewalls, the token authenticated by one of
the firewalls was available for all other firewalls. This could be abused
when the application defines different providers for each part of the
application, in such a situation, a user authenticated on a part of the
application could be considered authenticated on the rest of the
application. Starting in version 5.3.2, a patch ensures that the
authenticated token is only available for the firewall that generates it.

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

56.9%