CVE Feed

    Dashboard / CVE / CVE-2021-38417

    CVE-2021-38417

    VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.

    Published:Jul 27, 2022
    Last Modified:Apr 17, 2025
    EPS:Jul 27, 2022
    EPSS Score:0.00348
    CVSS Score:7.4

    Affected Products

    Vendor
    Visam
    Product
    Vbase Web-remote

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2021-42535 (CVSS 5.3) — VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the…
    CVE-2021-42537 (CVSS 5.9) — VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to…
    CVE-2020-10599 (CVSS 9.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be…
    CVE-2020-7000 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to disco…
    CVE-2020-10601 (CVSS 7.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure perm…
    CVE-2020-7004 (CVSS 8.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the …
    CVE-2020-7008 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High