Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-4258
HistoryDec 19, 2022 - 12:00 a.m.

CVE-2021-4258

2022-12-1900:00:00
ubuntu.com
ubuntu.com
8
vulnerability
whohas
package information handler
cleartext transmission
sensitive information
remote attack
patch
vdb-216251
encryption limit

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.8%

DISPUTED A vulnerability was found in whohas. It has been rated as
problematic. This issue affects some unknown processing of the component
Package Information Handler. The manipulation leads to cleartext
transmission of sensitive information. The attack may be initiated
remotely. The real existence of this vulnerability is still doubted at the
moment. The name of the patch is 667c3e2e9178f15c23d7918b5db25cd0792c8472.
It is recommended to apply a patch to fix this issue. The associated
identifier of this vulnerability is VDB-216251. NOTE: Most sources redirect
to the encrypted site which limits the possibilities of an attack.

Notes

Author Note
eslerm CVE possibly assigned based on commit message

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.8%

Related for UB:CVE-2021-4258