high7.5Public exploit code
CVE-2021-41382
Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Plastic SCM 10.0.16.5622 - WebAdmin Server Access2021-10-18 · webapps · multiple
Impact
Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plasticscm | Plastic Scm | before 10.0.16.5622 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html
- https://www.plasticscm.com/download/releasenotes/10.0.16.5622
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html
- https://www.plasticscm.com/download/releasenotes/10.0.16.5622