CVE-2021-44794

Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.

• CWE-862
• CWE-862

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0093
• https://www.usom.gov.tr/bildirim/tr-22-0093Third Party Advisory
• https://www.usom.gov.tr/bildirim/tr-22-0093Third Party Advisory

Published

Jan 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44789Rejected reason: Not used
• CVE-2021-4479Dräger Atlan A350 versions 1.00 up to and including 1.01 con…6.3
• CVE-2021-44790A carefully crafted request body can cause a buffer overflow…9.8
• CVE-2021-44791In Apache Druid 0.22.1 and earlier, certain specially-crafte…6.1
• CVE-2021-44792Single Connect does not perform an authorization check when …5.3
• CVE-2021-44793Single Connect does not perform an authorization check when …8.6
• CVE-2021-44795Single Connect does not perform an authorization check when …5.3
• CVE-2021-4480Dräger Protector Software prior to version 6.4.2 contains a …8.3
• CVE-2021-4481Dräger Protector Software prior to version 6.4.2 contains a …8.3
• CVE-2021-44827There is remote authenticated OS command injection on TP-Lin…8.8
• CVE-2021-44828Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bif…7.8
• CVE-2021-44829Cross Site Scripting (XSS) vulnerability exists in index.htm…6.1