CVE-2021-45379 Auth bypass in n/a
An attacker can log in as another user without a password due to incorrect access control in Glewlwyd.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-45379?
CVE-2021-45379 is a high-severity authentication bypass vulnerability in n/a, published on 30 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.
Weakness: CWE-287
Which versions are affected by CVE-2021-45379?
It affects 1 product.
Products include Glewlwyd Project Glewlwyd.
How do I fix CVE-2021-45379?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-45379 being exploited?
There is no known exploitation of CVE-2021-45379 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2021-45379, GHSA-9hmj-m2q2-x92g, UBUNTU-CVE-2021-45379.