CVE-2021-42699

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: Nov 5, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-42706.1A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/CVE-2021-427003.3Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.CVE-2021-427016.3An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the m CVE-2021-427023.3Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.CVE-2021-427036.1This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, red CVE-2021-427047.8Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.CVE-2021-427057.8PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attack CVE-2021-427067.8This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Des CVE-2021-427077.8PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to e CVE-2021-42716.1A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file CVE-2021-427117.8Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with S CVE-2021-427127.8Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.