CVE-2021-36388 - OpenCVE

In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4".

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Yellowfinbi	Yellowfin

Configuration 1 [-]

cpe:2.3:a:yellowfinbi:yellowfin:*:*:*:*:*:*:*:*

References

Link	Resource
http://seclists.org/fulldisclosure/2021/Oct/15	Third Party Advisory
https://cyberaz0r.info/2021/10/yellowfin-multiple-vulnerabilities/
https://github.com/cyberaz0r/Yellowfin-Multiple-Vulnerabilities/blob/main/README.md	Third Party Advisory
https://packetstormsecurity.com/files/164515/Yellowfin-Cross-Site-Scripting-Insecure-Direct-Object-Reference.html	Third Party Advisory VDB Entry
https://wiki.yellowfinbi.com/display/yfcurrent/Release+Notes+for+Yellowfin+9#ReleaseNotesforYellowfin9-Yellowfin9.6	Release Notes Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2021-10-14T18:16:25

Updated: 2024-06-04T17:13:16.993Z

Reserved: 2021-07-12T00:00:00

Link: CVE-2021-36388

JSON object: View

NVD Information

Status : Modified

Published: 2021-10-14T19:15:09.223

Modified: 2024-05-14T20:15:12.353

Link: CVE-2021-36388

JSON object: View

Redhat Information

No data.

CWE

CWE-639

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:yellowfinbi:yellowfin:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BA85696-845F-4AE5-9D9F-BDDF424CD4E8", "versionEndExcluding": "9.6.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page \"MIIAvatarImage.i4\"."}, {"lang": "es", "value": "En Yellowfin versiones anteriores a 9.6.1, es posible enumerar y descargar las im\u00e1genes de perfil de los usuarios mediante una vulnerabilidad de Referencia Directa de Objetos No Seguros explotable mediante el env\u00edo de una petici\u00f3n HTTP GET especialmente dise\u00f1ada a la p\u00e1gina \"MIIAvatarImage.i4\""}], "id": "CVE-2021-36388", "lastModified": "2024-05-14T20:15:12.353", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-10-14T19:15:09.223", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Oct/15"}, {"source": "cve@mitre.org", "url": "https://cyberaz0r.info/2021/10/yellowfin-multiple-vulnerabilities/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/cyberaz0r/Yellowfin-Multiple-Vulnerabilities/blob/main/README.md"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://packetstormsecurity.com/files/164515/Yellowfin-Cross-Site-Scripting-Insecure-Direct-Object-Reference.html"}, {"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://wiki.yellowfinbi.com/display/yfcurrent/Release+Notes+for+Yellowfin+9#ReleaseNotesforYellowfin9-Yellowfin9.6"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "nvd@nist.gov", "type": "Primary"}]}