CVE-2021-35050 User Credentials Stored in a Recoverable Format within Fidelis Network and Deception
Attackers with CommandPost access can decode stored user credentials to gain unauthorized application access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-35050?
CVE-2021-35050 is a medium-severity vulnerability in Fidelis Deception, published on 25 Jun 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.3. This vulnerability has been addressed in version 9.3.3 and subsequent versions.
Which versions are affected by CVE-2021-35050?
It affects 2 products.
Products include Fidelissecurity Deception, Fidelissecurity Network.
How do I fix CVE-2021-35050?
No fix has been published for CVE-2021-35050 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-35050 being exploited?
There is no known exploitation of CVE-2021-35050 in the wild and no public exploit code.
Other vulnerabilities in Fidelis Deception
- CVE-2021-35047 Privileged Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2021-35049 Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2021-35048 Unauthenticated SQL Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24388 Authenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24389 Authenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception
Sources
Also known as GHSA-2w8w-7v4c-mfg3.