PT-2021-14294 · Unknown · Browser/Operating System Finder

Imai Shinpei · Published 2021-12-01 · Updated 2021-12-02 · CVE-2021-20851

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Browser and Operating System Finder versions prior to 1.2

Description: A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors. This can lead to unauthorized access and actions within the system.

Recommendations: For versions prior to 1.2, update to version 1.2 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication checks to minimize the risk of exploitation. Restrict access to sensitive areas of the application to minimize the risk of unauthorized actions.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-20851

Affected Products

Browser/Operating System Finder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-20851 · Security Note
• https://osv.dev/vulnerability/CVE-2021-20851 · Vendor Advisory
• https://t.me/cibsecurity/33157 · Telegram Post
• https://t.me/cvenotify/24123 · Telegram Post
• https://jvn.jp/en/jp/JVN93562098/index.html · Note
• https://wordpress.org/plugins/browser-and-operating-system-finder · Note