CVE-2021-27453CWE-288

Mesa Labs AmegaView authentication bypass

High · published December 21, 2021

CVSS v3.1
7.3
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01046 · 63.9th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2021-12-21T17:55Z
EPSS history
Timeline
  • 21 DEC 17:55Z
    Mesa Labs AmegaView authentication bypass
    cvelistv5