CVE-2021-3825 - CVE House

Status published Critical CVE-2021-3825

Missing Authorization Checks in LiderAhenk

9.6 CVSS

Vulnerability Description

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3825

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Mehmet INCE from PRODAFT

References

More from TUBITAK

View All →

CVE-2021-3806

Path Traversal in Pardus Software Center

Medium 5.3

Affected Vendor

TUBITAK

View all reports →

Affected Software

Lider

Vulnerable Versions:

unspecified

Timeline

Official Publish: October 1st, 2021

Last Modified: May 18th, 2026

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application