medium5.3
CVE-2021-35246
The application fails to prevent users from connecting to it over unencrypted connections.
Impact
The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Engineer\'S Toolset | Version 2020.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35246
- https://documentation.solarwinds.com/en/success_center/ets/content/release_notes/ets_2022-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35246
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35246
- https://documentation.solarwinds.com/en/success_center/ets/content/release_notes/ets_2022-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35246