CVE-2021-45036
Summary
| CVE | CVE-2021-45036 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-11-28 16:15:00 UTC |
| Updated | 2023-11-09 16:15:00 UTC |
| Description | Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Notas de la versión - Documentación de Velneo | MISC | doc.velneo.com | |
| Nueva versión Velneo 32 | MISC | www.velneo.com | |
| Conexión con Velneo vServer - Documentación de Velneo | MISC | doc.velneo.com | |
| Protocolo VATPS - Documentación de Velneo | MISC | doc.velneo.com | |
| Velneo vClient improper authentication | INCIBE-CERT | INCIBE | www.incibe.es | ||
| Listado de cambios Velneo 32.0 | Velneo | MISC | velneo.es | |
| Notas de la versión - Documentación de Velneo | MISC | doc.velneo.com | |
| Velneo vClient improper authentication | INCIBE-CERT | CONFIRM | www.incibe-cert.es | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Jesús Ródenas Huerta, @Marmeus
There are currently no legacy QID mappings associated with this CVE.