CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Apache. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-41767
Severity
MEDIUM
CVSS
6.5
EPSS
1.93%
Apache
Original NVD Description
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's active use of that same connection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)