by Kastro
Paper/Archive/CVE-2021-27779

CVE-2021-27779

HCL Software HCL VersionVault Express — A Security Misconfiguration vulnerability affects HCL VersionVault Express

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (CNA, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 48.8.488 × 209.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.

Affected

ProductAffectedFixed inSource
HCL VersionVault Express2.0.x–CNA

Scores by source

HCL (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refsupport.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098165