PT-2021-23284 · Unknown · Plastic Scm

Published 2021-09-21 · Updated 2021-12-01 · CVE-2021-41382

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Plastic SCM versions prior to 10.0.16.5622

Description The issue is related to the mishandling of the WebAdmin server management interface in Plastic SCM.

Recommendations For versions prior to 10.0.16.5622, update to version 10.0.16.5622 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2021-41382

Affected Products

Plastic Scm

References · 7

• 🔥 http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html · Exploit
• 🔥 https://exploit-db.com/exploits/50426 · Exploit
• 🔥 http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-41382 · Vendor Advisory
• https://plasticscm.com/download/releasenotes/10.0.16.5622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41382 · Security Note
• https://t.me/cibsecurity/29209 · Telegram Post