Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-4286

Good to know:

icon
icon

Date: December 27, 2022

A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216875.

Language: Python

Severity Score

Related Resources (7)

https://vuldb.com/?ctiid.216875
https://vuldb.com/?id.216875
https://nvd.nist.gov/vuln/detail/CVE-2021-4286
https://github.com/cocagne/pysrp/releases/tag/1.0.17
https://github.com/cocagne/pysrp/pull/43
https://github.com/cocagne/pysrp/commit/dba52642f5e95d3da7af1780561213ee6053195f
https://www.mend.io/vulnerability-database/CVE-2021-4286

Severity Score

Weakness Type (CWE)

Observable Discrepancy

CWE-203

Top Fix

icon

Upgrade Version

Upgrade to version srp - 1.0.17

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us