PT-2021-2440 · Unknown · Ред База Данных

Published 2021-03-26 · Updated 2021-03-26

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Ред База Данных (affected versions not specified)

Description: The issue is related to an authentication policy flaw in the database management system, specifically an error in checking authentication credentials. This could allow a remote attacker to elevate their privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Improper Authentication

Weakness Enumeration

CWE-295

CWE-287

Related Identifiers

BDU:2021-01780

Affected Products

Ред База Данных

References · 4

• https://bdu.fstec.ru/vul/2021-01780 · Security Note
• https://reddatabase.ru/media/files/multifactor.dll · Note
• https://reddatabase.ru/media/files/libMultifactor.so · Note
• https://reddatabase.ru/sec-bulletin-26.03.2021 · Note