ByteOS Network

NVD Vulnerability Details :

CVE-2021-27935

Analyzed

Source-cve@mitre.org

Published At-03 Mar, 2021 | 20:15

Updated At-12 Jul, 2022 | 17:42

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

AdGuard (Adguard Software Ltd.)

>>adguard_home>>Versions before 0.105.2(exclusive)

cpe:2.3:a:adguard:adguard_home:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-522	Primary	nvd@nist.gov

CWE ID: CWE-522

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/AdguardTeam/AdGuardHome/issues/2470	cve@mitre.org	Issue Tracking Patch Third Party Advisory

Hyperlink: https://github.com/AdguardTeam/AdGuardHome/issues/2470

Source: cve@mitre.org

Resource:

Issue Tracking

Patch

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History