CVE-2021-39458: Medium severity REDAXO REDAXO vulnerability
Published Sep 9, 2021
·Updated
Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.
Affected Software
1 affected component
REDAXO REDAXO=5.12.1
Event History
Sep 9, 2021
CVE Published
via MITRE·11:32 AM
Data Sourced
via MITRE·11:32 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-39458?
CVE-2021-39458 has a high severity rating due to the potential exposure of sensitive database credentials.
2
How do I fix CVE-2021-39458?
To mitigate CVE-2021-39458, upgrade Yakamara Media Redaxo CMS to a version later than 5.12.1.
3
Who is affected by CVE-2021-39458?
CVE-2021-39458 affects users of Yakamara Media Redaxo CMS version 5.12.1.
4
What are the risks of CVE-2021-39458?
CVE-2021-39458 can lead to unauthorized access to sensitive data by exposing database credentials.
5
Is there a known exploit for CVE-2021-39458?
As of now, there are reports indicating that CVE-2021-39458 is exploitable under certain conditions.