CVE Catalog
CVE-2021-44674
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.04%
60th percentile - higher than 60% of all known CVEs
Summary
An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read files outside of the restricted directory.
Risk Assessment
The risk involves potential leakage of sensitive system or configuration data, which could lead to further attacks.
Recommendation
It is recommended to immediately update to the latest version of Open-AudIT and restrict system access to trusted users only.
Original NVD description (English source)
An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read file outside of the restricted directory.