CVE-2021-27374: High severity vertigis weboffice vulnerability
Published Feb 17, 2021
·Updated
VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation."
Affected Software
2 affected components
VertiGIS WebOffice=10.7-sp1
VertiGIS WebOffice=10.8-sp1
Event History
Feb 17, 2021
CVE Published
via MITRE·09:58 PM
Data Sourced
via MITRE·09:58 PM
Description
Frequently Asked Questions
1
Which deployments are affected?
The affected releases are VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207.
2
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-accessible exploitation with low attack complexity, no privileges required, and no user interaction.
3
What could an attacker gain?
An attacker may obtain access to content in the WebOffice application. The CVSS vector rates confidentiality impact as high and lists no integrity or availability impact.
4
What is the available remediation?
Apply patch20210202 for WebOffice 10.7 SP1 or patch20210207 for WebOffice 10.8 SP1.