CVE-2021-38465
Summary
| CVE | CVE-2021-38465 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-10-22 12:15:00 UTC |
| Updated | 2022-10-27 16:36:00 UTC |
| Description | The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable. |
Risk And Classification
Problem Types: CWE-770
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Auvesy | Versiondog | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| AUVESY Versiondog | CISA | CONFIRM | us-cert.cisa.gov | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Amir Preminger of Claroty reported these vulnerabilities to CISA.
Legacy QID Mappings
- 590588 AUVESY Versiondog Multiple Vulnerabilities (ICSA-21-292-01)