Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-25958

In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception occurs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.0
Products affected by CVE-2021-25958
  • Apache » Ofbiz » Version: 17.12.01
    cpe:2.3:a:apache:ofbiz:17.12.01
  • Apache » Ofbiz » Version: 17.12.03
    cpe:2.3:a:apache:ofbiz:17.12.03
  • Apache » Ofbiz » Version: 17.12.04
    cpe:2.3:a:apache:ofbiz:17.12.04
  • Apache » Ofbiz » Version: 17.12.05
    cpe:2.3:a:apache:ofbiz:17.12.05
  • Apache » Ofbiz » Version: 17.12.06
    cpe:2.3:a:apache:ofbiz:17.12.06
  • Apache » Ofbiz » Version: 17.12.07
    cpe:2.3:a:apache:ofbiz:17.12.07


Products
Pricing
Contact Us

Shodan ® - All rights reserved