Critical Authentication Bypass Vulnerability in libphp-adodb
Summary
CVE-2021-3850: Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21. Affects libphp-adodb across 2 version ranges.
< 5.20.19-1+deb11u1
< 952de6c4273d9b1e91c2b838044f8c2111150c29
Fixed in 5.20.19-1+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libphp-adodb is a PHP library that provides a database abstraction layer, allowing developers to interact with various database systems using a unified API. It is widely used in web applications for its ease of use and flexibility. However, prior to version 5.20.21, libphp-adodb was susceptible to an authentication bypass vulnerability, which could allow unauthorized access to sensitive data.
Vulnerability Detail
The vulnerability, identified as CVE-2021-3850, arises from a primary weakness in the authentication mechanism of the libphp-adodb library. This flaw allows attackers to bypass authentication controls, potentially leading to unauthorized access to the application and its data. The ramifications of this vulnerability are significant, as it could expose sensitive user information and compromise the integrity of the application. The vulnerability has a CVSS score of 9.1, indicating a critical severity level.
How To Fix
Minimum fixed version
5.20.19-1+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libphp-adodbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, consider implementing additional security measures such as IP whitelisting, two-factor authentication, or restricting access to sensitive areas of the application until the vulnerability can be addressed.
Conclusion
CVE-2021-3850 represents a significant security risk for applications using the libphp-adodb library. It is crucial for developers and system administrators to upgrade to the latest versions to protect against potential unauthorized access and data breaches. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for libphp-adodb →
FAQ
CVE-2021-3850 is a critical authentication bypass vulnerability in the libphp-adodb library that allows unauthorized access to applications using this library.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The consequences include potential unauthorized access to sensitive data, which could lead to data breaches and loss of user trust.
The CVSS score of CVE-2021-3850 is 9.1, indicating a critical severity level.
If you cannot upgrade immediately, consider implementing security measures such as IP whitelisting or two-factor authentication to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for libphp-adodb.
