CVE-2021-45379

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-45379
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45379.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-45379
Downstream
Published
2021-12-30T18:15:07.463Z
Modified
2026-04-11T21:23:12.092227Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

References

Affected packages

Git / github.com/babelouest/glewlwyd

Affected ranges

Type
GIT
Repo
https://github.com/babelouest/glewlwyd
Events
Introduced
9ff7a039b873666099ad306bef0c13082902d39a
Fixed
a7ddc5b3c2981cf15fc477fbd12397afcc559e4b
Fixed
125281f1c0d4b6a8b49f7e55a757205a2ef01fbe
Database specific 
{
    "versions": [
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.6.1"
        }
    ]
}

Affected versions

v2.*
v2.0.0
v2.1.0
v2.1.1
v2.2.0
v2.3.0
v2.3.1
v2.3.2
v2.4.0
v2.5.0
v2.5.1
v2.5.2
v2.5.3
v2.6.0

Database specific

vanir_signatures_modified 
"2026-04-11T21:23:12Z"
vanir_signatures 
[
    {
        "id": "CVE-2021-45379-262cbb68",
        "deprecated": false,
        "source": "https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe",
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "function": "callback_glewlwyd_user_auth",
            "file": "src/webservice.c"
        },
        "digest": {
            "function_hash": "287385179160249100524275443818706698966",
            "length": 7507.0
        }
    },
    {
        "id": "CVE-2021-45379-c09008b9",
        "deprecated": false,
        "source": "https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "src/webservice.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160032509845577399718325785668694135536",
                "159314386650147664546478821949250439871",
                "97272558064739958032241681553684032162",
                "318688609422231976619580614058765167857",
                "21727593704607572632123644709356901167",
                "311966006849433527990035948850796334565",
                "87472205284720780937743638570090968232"
            ]
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45379.json"