CVE-2021-35050 - CVE House

Back to Database

Status published Medium CVE-2021-35050

User Credentials Stored in a Recoverable Format within Fidelis Network and Deception

6.5 CVSS

Vulnerability Description

User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.3. This vulnerability has been addressed in version 9.3.3 and subsequent versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-35050

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Ryan Wincey(@rwincey) & Brandon Peterson(@Barbarisch926), Securifera

References

More from Fidelis Cybersecurity

View All →

Authenticated Command Injection Vulnerability in Fidelis Network and Deception

Authenticated Command Injection Vulnerability in Fidelis Network and Deception

Authenticated Command Injection Vulnerability in Fidelis Network and Deception

Authenticated SQL Injection Vulnerability in Fidelis Network and Deception

Authenticated Command Injection Vulnerability in Fidelis Network and Deception

Affected Vendor

Fidelis Cybersecurity

View all reports →

Affected Software

Fidelis Network, Fidelis Deception

Vulnerable Versions:

Fidelis Network, Fidelis Deception

Timeline

Official Publish: June 25th, 2021

Last Modified: September 16th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.