CVE-2021-3130: Medium severity Opmantek Open-AudIT vulnerability
Published Jan 20, 2021
·Updated
Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.
Affected Software
1 affected component
Opmantek Open-AudIT<=4.0.2
Event History
Jan 20, 2021
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Open-AudIT vulnerability?
The vulnerability ID for this Open-AudIT vulnerability is CVE-2021-3130.
2
What is the severity of CVE-2021-3130?
The severity of CVE-2021-3130 is medium, with a severity value of 5.9.
3
What does CVE-2021-3130 allow an attacker to do?
CVE-2021-3130 allows an attacker to change the obfuscation of SSH secrets, Windows passwords, and SNMP strings, making the credentials visible.
4
What versions of Open-AudIT are affected by CVE-2021-3130?
Open-AudIT up to version 3.5.3 is affected by CVE-2021-3130.
5
How can I fix CVE-2021-3130?
To fix CVE-2021-3130, it is recommended to upgrade Open-AudIT to version 4.0.2 or later.