CVE-2021-3850
Authentication Bypass by Primary Weakness in GitHub repository adodb/a ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, GHSA. Plus basse selon Ubuntu (moyenne).
Description
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| composer::GitHub Security Advisory Composer | adodb/adodb-php | 5.20.21, 5.21.4 |
| debian 10 | libphp-adodb | 5.20.14-1+deb10u1 |
| debian 11 | libphp-adodb | 5.20.19-1+deb11u1 |
| debian 12 | libphp-adodb | 5.21.4-1 |
| debian 13 | libphp-adodb | 5.21.4-1 |
| debian 14 | libphp-adodb | 5.21.4-1 |
| debian 9 | libphp-adodb | 5.20.9-1+deb9u1 |
| echo | libphp-adodb | 5.21.4-1 |
| rapidfort ubuntu 20.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| rapidfort ubuntu 22.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| rapidfort ubuntu 24.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| ubuntu 16.04-ESM | libphp-adodb | 5.20.3-1ubuntu1+esm1 |
Afficher les 15 entrées de 15 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| composer::GitHub Security Advisory Composer | adodb/adodb-php | 5.20.21, 5.21.4 |
| debian 10 | libphp-adodb | 5.20.14-1+deb10u1 |
| debian 11 | libphp-adodb | 5.20.19-1+deb11u1 |
| debian 12 | libphp-adodb | 5.21.4-1 |
| debian 13 | libphp-adodb | 5.21.4-1 |
| debian 14 | libphp-adodb | 5.21.4-1 |
| debian 9 | libphp-adodb | 5.20.9-1+deb9u1 |
| echo | libphp-adodb | 5.21.4-1 |
| rapidfort ubuntu 20.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| rapidfort ubuntu 22.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| rapidfort ubuntu 24.04 | libphp-adodb | 0:5.20.19-1ubuntu0.1 |
| ubuntu 16.04-ESM | libphp-adodb | 5.20.3-1ubuntu1+esm1 |
| ubuntu 18.04-ESM | libphp-adodb | 5.20.9-1ubuntu0.1~esm1 |
| ubuntu 20.04-ESM | libphp-adodb | 5.20.16-1ubuntu0.1~esm1 |
| ubuntu 22.04 | libphp-adodb | 5.20.19-1ubuntu0.1 |
Références
- https://github.com/ADOdb/ADOdb
- https://github.com/ADOdb/ADOdb/commit/952de6c4273d9b1e91c2b838044f8c2111150c29
- https://github.com/ADOdb/ADOdb/commit/b4d5ce70034c5aac3a1d51d317d93c037a0938d2
- https://github.com/ADOdb/ADOdb/issues/793
- https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf
- https://github.com/adodb/adodb/commit/952de6c4273d9b1e91c2b838044f8c2111150c29
- https://huntr.dev/bounties/bdf5f216-4499-4225-a737-b28bc6f5801c
- https://lists.debian.org/debian-lts-announce/2022/02/msg00006.html