CVE-2021-38457
22.10.2021, 12:15
The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form of authentication.Enginsight
| Vendor | Product | Version |
|---|---|---|
| auvesy | versiondog | 𝑥 < 8.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-306 - Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.