PT-2021-23663

CVE-2021-42701

·

Published

2021-11-05

·

Updated

2021-11-09

Description by

CVSS 3.1
6.3
Medium
MetricsAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)
Description The issue allows an attacker to prepare a specially crafted project file. If this file is opened, it attempts to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-471: Modification of Assumed-Immutable Data (MAID)
Related identifiers
CVE-2021-42701
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com