Paper/Archive/CVE-2021-34679

CVE-2021-34679

mitre — Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

EPSS 1%CVSS 10.0

critical.is priorityof 100

43

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 63.4.634 × 2012.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

mitre (CNA)10.0CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

References

refdocs.thycotic.com/prs/5.3.0/release-notes/5.3.0.md