CVE-2021-44792
MEDIUMKrontech Single Connect < 2.16 - Unauthenticated Sensitive Information Exposure via Log-Monitor Module
Title source: llmDescription
Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.
References (2)
Core 2
Core References
Third Party Advisory government-resource
broken-link
https://www.usom.gov.tr/bildirim/tr-22-0093
Government Resource government-resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0093
Scores
CVSS v3
5.3
EPSS
0.0099
EPSS Percentile
58.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-862
Status
published
Products (2)
Kron/Single Connect
unspecified - 2.16
krontech/single_connect
< 2.16
Published
Jan 27, 2022
Tracked Since
Feb 18, 2026