CVE-2021-38475CWE-732

AUVESY Versiondog

High · published October 22, 2021

CVSS v3.1
7.3
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00916 · 59.8th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-10-22T11:22Z
EPSS history
Timeline
  • 22 OCT 11:22Z
    AUVESY Versiondog
    cvelistv5