CVE-2021-43350

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-90 CWE-74

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Traffic Control	>= Traffic Ops, < 6.0.1

References

http://www.openwall.com/lists/oss-security/2021/11/11/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/11/11/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/11/17/1Mailing List, Third Party Advisory
https://trafficcontrol.apache.org/security/Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/11/11/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/11/11/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/11/17/1Mailing List, Third Party Advisory
https://trafficcontrol.apache.org/security/Vendor Advisory

Timeline

Published: Nov 11, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-433538.8The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settin CVE-2021-433559.8Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without au CVE-2021-433587.5Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks withou CVE-2021-433598.8Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authentica CVE-2021-43369.8A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown CVE-2021-433608.8Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a po CVE-2021-433619.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This CVE-2021-433629.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This CVE-2021-43378.8Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax CVE-2021-43385.4The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redir CVE-2021-433887.5Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue CVE-2021-433895.5An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in dr