CVE-2021-38465CWE-400
AUVESY Versiondog
High · published October 22, 2021
What it is
The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable.
The record
Technical detail
- CVSS v3.1
- 8.0 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00839 · 57.4th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2021-10-22T11:23Z
EPSS history
Timeline
22 OCT 11:23Z
AUVESY Versiondog
cvelistv5