Vulnerability · Published Apr 13, 2021 · Assigned by GitHub_M

CVE-2021-21399Unauthenticated SubSonic backend access in Ampache

Critical 9.1

In plain English

A critical-severity improper access control in ampache from ampache. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)1.4%top 26.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and workaround guidance see the referenced GitHub security advisory.

Affected products (as reported)

Vendor	Product	Versions
ampache	ampache	< 4.4.1

Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/ampache/ampache/security/advisories/GHSA-p9pm-j95j-5mjf x_refsource_CONFIRM