PT-2021-23601 · Xorux · Lpar2Rrd+1

Simon Geusebroek · Published 2021-11-08 · Updated 2022-09-03 · CVE-2021-42371

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LPAR2RRD and STOR2RRD versions prior to 7.30

Description The issue concerns a hardcoded system account named lpar2rrd in XoruX LPAR2RRD and STOR2RRD.

Recommendations For versions prior to 7.30, update to version 7.30 or later to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2021-42371

GHSA-P2FQ-9H5J-X6W5

Affected Products

Lpar2Rrd

Stor2Rrd

References · 7

• https://stor2rrd.com/note730.php · Vendor Advisory
• https://lpar2rrd.com/note730.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42371 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42371 · Vendor Advisory
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-p2fq-9h5j-x6w5 · Note
• https://t.me/cvenotify/23194 · Telegram Post
• https://t.me/cibsecurity/31948 · Telegram Post