PT-2022-11394 · Ariang · Ariang

Amozing · Published 2022-06-15 · Updated 2023-08-08 · CVE-2021-41418

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AriaNg versions 0.1.0 through 1.2.2

Description The issue is related to incorrect access control, where the system fails to authenticate visitors' access rights, potentially allowing unauthorized access.

Recommendations For versions 0.1.0 through 1.2.2, consider implementing proper access control mechanisms to authenticate and verify visitors' access rights until a patch is available.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-41418

Affected Products

Ariang

References · 3

• 🔥 https://github.com/Amozing/Am0zang/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41418 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41418 · Vendor Advisory