CVE-2021-46900

Katalog CVE

CVSS 7.5 · High EPSS 0,37%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada sympa. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.

Rincian

Terbit di NVD

31 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sympa-community/sympa-community.github.io/blob/master/security/2021-001.md mitigasi · advisory vendor
• https://github.com/sympa-community/sympa/issues/1091 issue tracking · mitigasi · advisory vendor
• https://www.sympa.community/security/2021-001.html mitigasi · advisory vendor