Unscored CVE-2021-45379 EUVD-2021-32152GHSA-9hmj-m2q2-x92g

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user wit…

Published Dec 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: glewlwyd Package: glewlwyd Ecosystem: Debian Ecosystem: Ubuntu

Description

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	glewlwyd	2.6.1-1	—
Debian 12	glewlwyd	2.6.1-1	—

Ubuntu