CVE-2021-45475 : Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosur

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability.

Published 2022-10-27 10:15:10

Updated 2023-12-28 19:05:45

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2021-45475

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-45475

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	Computer Emergency Response Team of the Republic of Turkey
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	Computer Emergency Response Team of the Republic of Turkey
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2021-45475

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by:

Products affected by CVE-2021-45475

Yordam » Library Automation System
Versions before (<) 19.02
cpe:2.3:a:yordam:library_automation_system:*:*:*:*:*:*:*:*
Matching versions