CVEDB API

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.9%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 2.1

References

Products affected by CVE-2021-38379

Northern.tech » Cfengine » Version: 3.10.7

cpe:2.3:a:northern.tech:cfengine:3.10.7
Northern.tech » Cfengine » Version: 3.12.1

cpe:2.3:a:northern.tech:cfengine:3.12.1
Northern.tech » Cfengine » Version: 3.12.2

cpe:2.3:a:northern.tech:cfengine:3.12.2
Northern.tech » Cfengine » Version: 3.12.3

cpe:2.3:a:northern.tech:cfengine:3.12.3
Northern.tech » Cfengine » Version: 3.15.0

cpe:2.3:a:northern.tech:cfengine:3.15.0
Northern.tech » Cfengine » Version: 3.15.2

cpe:2.3:a:northern.tech:cfengine:3.15.2
Northern.tech » Cfengine » Version: 3.15.3

cpe:2.3:a:northern.tech:cfengine:3.15.3
Northern.tech » Cfengine » Version: 3.15.4

cpe:2.3:a:northern.tech:cfengine:3.15.4
Northern.tech » Cfengine » Version: 3.15.5

cpe:2.3:a:northern.tech:cfengine:3.15.5
Northern.tech » Cfengine » Version: 3.16.0

cpe:2.3:a:northern.tech:cfengine:3.16.0
Northern.tech » Cfengine » Version: 3.17.0

cpe:2.3:a:northern.tech:cfengine:3.17.0
Northern.tech » Cfengine » Version: 3.18.0

cpe:2.3:a:northern.tech:cfengine:3.18.0
Northern.tech » Cfengine » Version: 3.7

cpe:2.3:a:northern.tech:cfengine:3.7