PT-2021-23341 · Tad Web · Tad Web

Hsuan · Published 2021-10-08 · Updated 2022-08-12 · CVE-2021-41568

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tad Web (affected versions not specified)

Description The issue allows remote attackers to bypass authorization, enabling them to exploit the system's original function for viewing bulletin boards and uploading files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Missing Authentication

Weakness Enumeration

CWE-285

CWE-306

Related Identifiers

CVE-2021-41568

Affected Products

Tad Web

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-41568 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41568 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-5172-b012c-1.html · Note