CVE-2021-27757
Last modified
CVE-2021-27757 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. " Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.Since the information is stored in cleartext, attackers could potentially read it and gain access to sensitive information.". EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
" Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.Since the information is stored in cleartext, attackers could potentially read it and gain access to sensitive information."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hcltech | Bigfix Insights | >= 10.0, < 10.0.8.0 |
References
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095303Patch, Vendor Advisory
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095303Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-27757?
How severe is CVE-2021-27757?
How do I fix CVE-2021-27757?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-27741" Security vulnerability in HCL Commerce Management Center a…9.1
- CVE-2021-27746"HCL Connections Security Update for Reflected Cross-Site Sc…5.4
- CVE-2021-27751HCL Commerce is affected by an Insufficient Session Expirati…3.3
- CVE-2021-27753"Sametime Android PathTraversal Vulnerability"5.5
- CVE-2021-27755"Sametime Android potential path traversal vulnerability whe…5.5
- CVE-2021-27756"TLS-RSA cipher suites are not disabled in BigFix Compliance…7.5
- CVE-2021-27758There is a security vulnerability in login form related to C…6.5
- CVE-2021-27759This vulnerability arises because the application allows the…6.5
- CVE-2021-27760An issue was discovered in the Sametime chat feature in the …5.5
- CVE-2021-27761Weak web transport security (Weak TLS): An attacker may be a…7.5
- CVE-2021-27762Misconfigured security-related HTTP headers: Several securit…9.8
- CVE-2021-27764Cookie without HTTPONLY flag set. NUMBER cookie(s) was set w…6.5
Are you affected by CVE-2021-27757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST