PT-2022-11624 · Whohas+1 · Whohas+1

Published 2022-12-19 · Updated 2024-08-03 · CVE-2021-4258

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions whohas (affected versions not specified)

Description A vulnerability was found in the component Package Information Handler of whohas, which leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment. Most sources redirect to the encrypted site, which limits the possibilities of an attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

CWE-310

Related Identifiers

CVE-2021-4258

Affected Products

Debian

Whohas

References · 12

• https://github.com/whohas/whohas/commit/667c3e2e9178f15c23d7918b5db25cd0792c8472 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-4258 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-4258 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4258 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-4258 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4258 · Security Note
• https://ubuntu.com/security/CVE-2021-4258 · Vendor Advisory
• https://t.me/cibsecurity/54864 · Telegram Post
• https://t.me/cvenotify/40811 · Telegram Post
• https://t.me/cvenotify/88819 · Telegram Post
• https://vuldb.com/?id.216251 · Note