PT-2021-17485 · Visualware · Myconnection Server

Published 2021-02-19 · Updated 2021-03-01 · CVE-2021-27509

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server versions prior to 11.0b build 5382

Description The issue arises because each published report is not associated with its own access code.

Recommendations For versions prior to 11.0b build 5382, update to version 11.0b build 5382 or later to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-27509

Affected Products

Myconnection Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-27509 · Security Note
• https://myconnectionserver.visualware.com/support/newrelease.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27509 · Vendor Advisory
• https://t.me/cvenotify/10658 · Telegram Post
• https://t.me/cvenotify/10182 · Telegram Post