CVE-2021-27018

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Aug 30, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-270194.3PuppetDB logging included potentially sensitive system information.CVE-2021-270208.8Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.CVE-2021-270218.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL queryCVE-2021-270224.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being loggCVE-2021-270239.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a difCVE-2021-270248.1A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to accessCVE-2021-270256.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service conditCVE-2021-270264.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be loggedCVE-2021-270277.8An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLCVE-2021-270287.8A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously craftCVE-2021-270295.5The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review versionCVE-2021-270307.8A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s
CVE-2021-27018: High severity, CVSS 7.5 | Vulnix