CVE-2021-45025 Information disclosure in n/a

High 7.5 Published 17 Jun 2022 Updated 9 Jul 2026

Attackers can read sensitive information stored in cleartext cookies from the ASG-Zena Cross Platform Server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-45025?

CVE-2021-45025 is a high-severity vulnerability in n/a, published on 17 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie.

Weakness: CWE-312

Which versions are affected by CVE-2021-45025?

It affects 1 product.

Products include Rocketsoftware Ags-Zena.

How do I fix CVE-2021-45025?

No fix has been published for CVE-2021-45025 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-45025 being exploited?

There is no known exploitation of CVE-2021-45025 in the wild and no public exploit code.

Sources

Also known as GHSA-v63c-6qf8-qq2c.