CVE-2021-45036: Velneo vClient improper authentication
Published Nov 28, 2022
·Updated
Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.
Affected Software
1 affected component
Velneo vClient=28.1.3
Remediation
Information
This vulnerability has been fixed by Velneo team in version 32, released on 11/08/2022.
Event History
Nov 28, 2022
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-45036?
The severity of CVE-2021-45036 is classified as high due to the potential for user impersonation.
2
How do I fix CVE-2021-45036?
To fix CVE-2021-45036, update Velneo vClient to a version later than 28.1.3 that addresses this vulnerability.
3
Who is affected by CVE-2021-45036?
Users of Velneo vClient version 28.1.3 are affected by CVE-2021-45036.
4
What type of attack can exploit CVE-2021-45036?
CVE-2021-45036 can be exploited via an authentication spoofing attack leveraging a victim's username and hashed password.
5
When was CVE-2021-45036 published?
CVE-2021-45036 was published on December 14, 2021.