PT-2021-23285 · Securonix · Securonix Snypr

Published 2021-09-27 · Updated 2021-10-05 · CVE-2021-41385

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Securonix SNYPR version 6.3.1 Build 184295 0302

Description The issue allows an authenticated user to obtain access to server configuration details via Server-Side Request Forgery (SSRF) in the third party intelligence connector.

Recommendations For Securonix SNYPR version 6.3.1 Build 184295 0302, consider restricting access to the third party intelligence connector to minimize the risk of exploitation until a patch is available.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2021-41385

Affected Products

Securonix Snypr

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-41385 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41385 · Vendor Advisory
• https://documentation.securonix.com/onlinedoc/Content/Product%20Security/Content/Product%20Security/Authenticated%20SSRF%20in%20TPI.htm · Vendor Advisory
• https://t.me/cibsecurity/29432 · Telegram Post
• https://t.me/cvenotify/21487 · Telegram Post
• https://t.me/cvenotify/21480 · Telegram Post