CVE-2021-46250 CRITICAL

CVE-2021-46250

Vendor N/A
Product n/a
Published February 15, 2022
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

What the vulnerability does

01Description

An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2.

Key dates

02Disclosure timeline

February 15, 2022 CVE published
August 4, 2024 Record updated