CVE-2021-45475 Information disclosure in Yordam Library Information Document Automation Program
Unauthenticated attackers can access sensitive information in Yordam Library Information Document Automation Program.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-45475?
CVE-2021-45475 is a medium-severity vulnerability in Yordam Library Information Document Automation Program, published on 27 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability.
Weakness: CWE-200
Which versions are affected by CVE-2021-45475?
It affects 1 product.
Products include Yordam Library Automation System.
How do I fix CVE-2021-45475?
No fix has been published for CVE-2021-45475 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-45475 being exploited?
There is no known exploitation of CVE-2021-45475 in the wild and no public exploit code.
Other vulnerabilities in Yordam Library Information Document Automation Program
- CVE-2021-45477 IDOR in Yordam Library Automation System
- CVE-2021-45478 IDOR in Yordam Library Automation System
- CVE-2025-1301 Reflected XSS in Yordam Informatics' Library Automation System
- CVE-2022-2266 Reflected XSS University Library Automation System
- CVE-2021-45479 XSS in Yordam Library Automation System
Sources
Also known as GHSA-7446-q5cf-qxfv.