CVE-2021-27786

Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines the protocol between a browser and server to see if the request is allowed. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information when the Access-Control-Allow-Credentials is enabled.

• CWE-942
• CWE-697

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098603Vendor Advisory
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098603Vendor Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27780The software may be vulnerable to both Un-Auth XML interacti…5.3
• CVE-2021-27781The Master operator may be able to embed script tag in HTML …4.8
• CVE-2021-27782HCL BigFix Mobile / Modern Client Management Admin and Confi…7.5
• CVE-2021-27783User generated PPKG file for Bulk Enroll may have unencrypte…6.5
• CVE-2021-27784The provided HCL Launch Container images contain non-unique …7.5
• CVE-2021-27785HCL Commerce's Remote Store server could allow a local attac…5
• CVE-2021-27788HCL Verse is susceptible to a Cross Site Scripting (XSS) vul…6.1
• CVE-2021-27789The Web application of Brocade Fabric OS before versions Bro…6.5
• CVE-2021-27790The command ipfilter in Brocade Fabric OS before Brocade Fab…7.8
• CVE-2021-27791The function that is used to parse the Authentication header…5.4
• CVE-2021-27792The request handling functions in web management interface o…7.8
• CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3