Vulnerability · Published May 24, 2022 · Assigned by VulDB
CVE-2021-4230Airfield Online MySQL Backup improper authentication
Low 3.7
In plain English
A low-severity improper authentication in Airfield Online from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)1.0%top 37.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommended to the change the configuration settings.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| unspecified | Airfield Online | n/a |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://vuldb.com/?id.183172 x_refsource_MISC