CVE-2021-38475 AUVESY Versiondog

What is CVE-2021-38475?

CVE-2021-38475 is a high-severity vulnerability in AUVESY Versiondog, published on 22 Oct 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions.

Weakness: CWE-732

Which versions are affected by CVE-2021-38475?

It affects 1 product.

Products include Auvesy Versiondog.

How do I fix CVE-2021-38475?

No fix has been published for CVE-2021-38475 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-38475 being exploited?

There is no known exploitation of CVE-2021-38475 in the wild and no public exploit code.

Other vulnerabilities in AUVESY Versiondog

• CVE-2021-38449 AUVESY Versiondog Critical 9.8
• CVE-2021-38457 AUVESY Versiondog Critical 9.8
• CVE-2021-38477 AUVESY Versiondog Critical 9.8
• CVE-2021-38453 AUVESY Versiondog Critical 9.1
• CVE-2021-38469 AUVESY Versiondog Critical 9.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-v75r-jm5p-c6qw.