Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2021-3850

Authentication Bypass by Primary Weakness

Published: Jan 25, 2022 | Modified: Nov 21, 2024
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2021-3850
CWEhttps://cwe.mitre.org/data/definitions/305.html

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.

Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Affected Software

Name Vendor Start Version End Version
Adodb Adodb_project * 5.20.21 (including)
Libphp-adodb Ubuntu bionic *
Libphp-adodb Ubuntu esm-apps/bionic *
Libphp-adodb Ubuntu esm-apps/focal *
Libphp-adodb Ubuntu esm-apps/xenial *
Libphp-adodb Ubuntu focal *
Libphp-adodb Ubuntu impish *
Libphp-adodb Ubuntu jammy *
Libphp-adodb Ubuntu kinetic *
Libphp-adodb Ubuntu lunar *
Libphp-adodb Ubuntu trusty *
Libphp-adodb Ubuntu upstream *
Libphp-adodb Ubuntu xenial *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2025 Aqua Security Software Ltd.   Privacy Policy | Terms of Use