A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216875.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This     issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information     exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the     patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component.
    The associated identifier of this vulnerability is VDB-216875. (CVE-2021-4286)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This
    issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information
    exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the
    patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component.
    The associated identifier of this vulnerability is VDB-216875. (CVE-2021-4286)

ID	Name	Product	Family	Severity
262597	Linux Distros Unpatched Vulnerability : CVE-2021-4286	Nessus	Misc.	high
421748	SCA: security update for srp (GHSA-xmc3-9m9j-w9x4)	Tenable Cloud Security	SCA Checks	high
421748	SCA: security update for srp (GHSA-xmc3-9m9j-w9x4)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2021-4286

high

Tenable Plugins

high

high

high