VULNERABILITY INTELLIGENCE

CVE-2021-3130

CVSS score5.9 MEDIUM
EPSS probability1.33%
CISA KEVNot currently listed
Published2021-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references