CVE-2021-34369

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an authenticated user of that application, so we consider this not applicable.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-34379.8Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denCVE-2021-343706.1Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable securitCVE-2021-343719.8Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSesCVE-2021-343727.8Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing codCVE-2021-343736.0Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflowCVE-2021-343746.7Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory cCVE-2021-343756.7Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-basCVE-2021-343766.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations witCVE-2021-343776.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations witCVE-2021-343786.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations wiCVE-2021-343796.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an I/O buffer parameterCVE-2021-34387.8A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalatio
CVE-2021-34369: Medium severity, CVSS 6.5 | Vulnix