CVE-2021-44522CWE-668

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions)…

published December 14, 2021

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01405 · 72.4th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2021-12-14T12:07Z
EPSS history
Timeline
  • 14 DEC 12:07Z
    A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions)…
    cvelistv5