« Volver al listado

CVE-2021-27509

Estado: ModificadaAlta (7.5)—

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Visualware — Myconnection Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-27509",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-02-19T23:15:12.733",
  "references": [
    {
      "url": "https://myconnectionserver.visualware.com/support/newrelease.html",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://myconnectionserver.visualware.com/support/newrelease.html",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code."
    },
    {
      "lang": "es",
      "value": "En Visualware MyConnection Server versiones anteriores a 11.0b build 5382, cada reporte publicado no está asociado con su propio código de acceso"
    }
  ],
  "lastModified": "2026-06-17T03:45:00.060",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:visualware:myconnection_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26497F68-FCFE-4A7E-9032-EA20B14CD9F5",
              "versionEndIncluding": "11.0b"
            },
            {
              "criteria": "cpe:2.3:a:visualware:myconnection_server:11.0b:build5321:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F175E6C3-5D6A-489F-999E-94771E492786"
            },
            {
              "criteria": "cpe:2.3:a:visualware:myconnection_server:11.0b:build5360:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "975DAB54-0FCB-4A8B-BC43-6A467A410260"
            },
            {
              "criteria": "cpe:2.3:a:visualware:myconnection_server:11.0b:build5363:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DAC73EB-FF53-4334-AB5E-3A32C49AC4F1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}