CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

8.94% chance of exploitation in the next 30 days, 95th percentile

Published

2021-09-21

Updated

2024-08-04

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Cont…
• http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Obje…
• basubanakar/Plastic-SCM-Exploit0★ · 2021-10-18
• ph4nt0m-py/Plastic-SCM-Exploit0★ · 2021-10-18

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50426

References

• CVE Record
• NVD entry

Related

• CVE-2021-41381
• CVE-2021-4139
• CVE-2021-41379
• CVE-2021-41390
• CVE-2021-4136
• CVE-2021-41391