Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-45036
PUBLISHED
More InfoOfficial Page
Assigner-INCIBE
Assigner Org ID-0cbda920-cd7f-484a-8e76-bf7f4b7f4516
View Known Exploited Vulnerability (KEV) details
Published At-28 Nov, 2022 | 15:29
Updated At-25 Apr, 2025 | 14:59
Rejected At-
▼CVE Numbering Authority (CNA)
Velneo vClient improper authentication

Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.

Affected Products
Vendor
Velneo
Product
Velneo vClient
Default Status
unaffected
Versions
Affected
  • 28.1.3
Problem Types
TypeCWE IDDescription
CWECWE-290CWE-290 Authentication Bypass by Spoofing
Type: CWE
CWE ID: CWE-290
Description: CWE-290 Authentication Bypass by Spoofing
Metrics
VersionBase scoreBase severityVector
3.18.7HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Version: 3.1
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

This vulnerability has been fixed by Velneo team in version 32, released on 11/08/2022.

Configurations
Workarounds
Exploits
Credits
finder
Jesús Ródenas Huerta, @Marmeus
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.incibe.es/en/incibe-cert/notices/aviso/velneo-vclient-improper-authentication-0
N/A
https://www.velneo.com/blog/disponible-la-nueva-version-velneo-32
N/A
https://doc.velneo.com/v/32/velneo/notas-de-la-version#mejoras-de-seguridad-en-validacion-de-usuario-y-contrasena
N/A
https://velneo.es/mivelneo/listado-de-cambios-velneo-32/
N/A
https://doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps
N/A
https://doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps
N/A
https://doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver
N/A
Hyperlink: https://www.incibe.es/en/incibe-cert/notices/aviso/velneo-vclient-improper-authentication-0
Resource: N/A
Hyperlink: https://www.velneo.com/blog/disponible-la-nueva-version-velneo-32
Resource: N/A
Hyperlink: https://doc.velneo.com/v/32/velneo/notas-de-la-version#mejoras-de-seguridad-en-validacion-de-usuario-y-contrasena
Resource: N/A
Hyperlink: https://velneo.es/mivelneo/listado-de-cambios-velneo-32/
Resource: N/A
Hyperlink: https://doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps
Resource: N/A
Hyperlink: https://doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps
Resource: N/A
Hyperlink: https://doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.incibe.es/en/incibe-cert/notices/aviso/velneo-vclient-improper-authentication-0
x_transferred
https://www.velneo.com/blog/disponible-la-nueva-version-velneo-32
x_transferred
https://doc.velneo.com/v/32/velneo/notas-de-la-version#mejoras-de-seguridad-en-validacion-de-usuario-y-contrasena
x_transferred
https://velneo.es/mivelneo/listado-de-cambios-velneo-32/
x_transferred
https://doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps
x_transferred
https://doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps
x_transferred
https://doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver
x_transferred
Hyperlink: https://www.incibe.es/en/incibe-cert/notices/aviso/velneo-vclient-improper-authentication-0
Resource:
x_transferred
Hyperlink: https://www.velneo.com/blog/disponible-la-nueva-version-velneo-32
Resource:
x_transferred
Hyperlink: https://doc.velneo.com/v/32/velneo/notas-de-la-version#mejoras-de-seguridad-en-validacion-de-usuario-y-contrasena
Resource:
x_transferred
Hyperlink: https://velneo.es/mivelneo/listado-de-cambios-velneo-32/
Resource:
x_transferred
Hyperlink: https://doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps
Resource:
x_transferred
Hyperlink: https://doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps
Resource:
x_transferred
Hyperlink: https://doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found