GitHub Advisoryadvisory · RubyGems

GHSA-wrxf-x8rm-6ggg Fluent Fluentd and Fluent-ui use default password

HIGH Published 2023-04-04 Modified 2025-06-23 Official page ↗

Aliases: CVE-2020-21514
Ecosystem: RubyGems
Packages: fluentd-ui
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-276
Reviewed: 2023-08-11

Affected packages

• RubyGems fluentd-ui: <= 1.2.2 (no fix yet)

Description

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.

Related

Alias · CVE (1)

CVE-2020-21514 An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default… vulnerability

Weakness · CWE (1)

CWE-276 Incorrect Default Permissions weakness

References