CVE-2021-3130

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3130
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3130.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3130
Published
2021-01-20T16:15:14Z
Modified
2026-10-24T10:30:19Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:opmantek:open-audit:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "4.0.2"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "opmantek:open-audit"
        }
    ]
}
References

Affected packages

Git / github.com/opmantek/open-audit

Affected ranges

Type
GIT
Repo
https://github.com/opmantek/open-audit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
19e956719d99b13bf986a3da7dd45fefe47dbeaf
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "3.5.3"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

Open-AudIT_1.*
Open-AudIT_1.12
Open-AudIT_1.12.2
Open-AudIT_1.12.2_1
Open-AudIT_1.12.4
Open-AudIT_1.12.8
Open-AudIT_1.12.8.1
Open-AudIT_1.12.8.2
Open-AudIT_1.8.2
Open-AudIT_2.*
Open-AudIT_2.0.1
Open-AudIT_2.0.1-1
Open-AudIT_2.0.1-2
Open-AudIT_2.0.10
Open-AudIT_2.0.11
Open-AudIT_2.0.2-1
Open-AudIT_2.0.6
Open-AudIT_2.0.6_beta
Open-AudIT_2.0.8
Open-AudIT_2.1
Open-AudIT_2.2.1
Open-AudIT_2.2.2
Open-AudIT_2.2.3
Open-AudIT_2.2.4
Open-AudIT_2.2.5
Open-AudIT_2.2.6
Open-AudIT_2.2.7
Open-AudIT_2.3.1
Open-AudIT_2.3.2
Open-AudIT_3.*
Open-AudIT_3.0.0
Open-AudIT_3.0.0_windows
Open-AudIT_3.1.0
Open-AudIT_3.2.0
Open-AudIT_3.2.1
Open-AudIT_3.2.2
Open-AudIT_3.3.0
Open-AudIT_3.3.1
Open-AudIT_3.3.2
Open-AudIT_3.5.0
Open-AudIT_3.5.1
Open-AudIT_3.5.2
Open-AudIT_3.5.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3130.json"