Vulnerabilities

TI-2021-20279 CVE-2021-44795 · GHSA-w72r-mx5p-g4q9

Modifying User Permissions via Unauthorized Access in Single Connect

LOW 35

Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20278 CVE-2021-44794 · GHSA-6p9r-qwhr-gc82

LOW 26

Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00993 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20277 CVE-2021-44793 · GHSA-xp77-g88w-h7mg

MEDIUM 40

Single Connect does not perform an authorization check when using the sc-reports-ui" module.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01187 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20276 CVE-2021-44792 · GHSA-fq38-v44x-849g

LOW 26

Single Connect does not perform an authorization check when using the "log-monitor" module.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00993 Published 2022-01-27 Fixed in 2.16 CWE-862