PT-2022-12236 · Unknown · Single Connect

Gokhan Sahin · Published 2022-01-27 · Updated 2026-05-18 · CVE-2021-44795

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Single Connect (affected versions not specified)

Description The issue arises from the lack of an authorization check in Single Connect when utilizing the sc-assigned-credential-ui module. This allows a remote attacker to potentially modify user permissions without authentication, including the possibility of deleting permissions from other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-44795

Affected Products

Single Connect

References · 7

• https://osv.dev/vulnerability/CVE-2021-44795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44795 · Security Note
• https://t.me/cvenotify/94851 · Telegram Post
• https://usom.gov.tr/bildirim/tr-22-0093 · Note
• https://t.me/cveNotify/163846 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0093 · Note
• https://t.me/cibsecurity/36378 · Telegram Post