Vulnerability · Published Dec 15, 2021 · Assigned by GitHub_M

CVE-2021-43834Incorrect Authentication in elabftw

Critical 9.1

In plain English

A critical-severity improper authentication in elabftw from elabftw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)1.0%top 36.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows an attacker to authenticate as an existing user, if that user was created using a single sign-on authentication option such as LDAP or SAML. It impacts instances where LDAP or SAML is used for authentication instead of the (default) local password mechanism. Users should upgrade to at least version 4.2.0.

Affected products (as reported)

Vendor	Product	Versions
elabftw	elabftw	< 4.2.0

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/elabftw/elabftw/releases/tag/4.2.0 x_refsource_MISC
https://github.com/elabftw/elabftw/security/advisories/GHSA-98rp-gx76-33ph x_refsource_CONFIRM