CVE-2021-4294

A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216987.

• CWE-208
• CWE-203

• https://github.com/openshift/osin/commit/8612686d6dda34ae9ef6b5a974e4b7accb4fea29Patch
• https://github.com/openshift/osin/pull/200Issue Tracking
• https://vuldb.com/?ctiid.216987Permissions Required
• https://vuldb.com/?id.216987Permissions Required
• https://github.com/openshift/osin/commit/8612686d6dda34ae9ef6b5a974e4b7accb4fea29Patch
• https://github.com/openshift/osin/pull/200Issue Tracking
• https://vuldb.com/?ctiid.216987Permissions Required
• https://vuldb.com/?id.216987Permissions Required

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42912FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS c…8.8
• CVE-2021-42913The SyncThru Web Service on Samsung SCX-6x55X printers allow…7.5
• CVE-2021-42917Buffer overflow vulnerability in Kodi xbmc up to 19.0, allow…5.5
• CVE-2021-4292A vulnerability was found in OpenMRS Admin UI Module up to 1…6.1
• CVE-2021-42923ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerabi…7.3
• CVE-2021-4293** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
• CVE-2021-42940A Cross Site Scripting (XSS) vulnerability exists in Projeqt…9.9
• CVE-2021-42943Stored cross-site scripting (XSS) in admin/usermanager.php o…5.4
• CVE-2021-42945A SQL Injection vulnerability exists in ZZCMS 2021 via the a…9.8
• CVE-2021-42946A Cross Site Scripting (XSS) vulnerability exists in htmly.2…4.8
• CVE-2021-42948HotelDruid Hotel Management Software v3.0.3 and below was di…3.7
• CVE-2021-42949The component controlla_login function in HotelDruid Hotel M…9.8