← All advisories

High severity7.5NVD Advisory· Published Nov 1, 2021· Updated Jun 17, 2026

CVE-2021-42557

CVE-2021-42557

Description

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jeedom/Jeedomcpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:jeedom:jeedom:*:*:*:*:*:*:*:*range: <=4.1.19
- (no CPE)range: <=4.1.19

Patches

Vulnerability mechanics

References

2

www.synacktiv.com/sites/default/files/2021-10/advisory_Jeedom_Auth_Bypass_CVE-2021-42557.pdfnvdExploitThird Party Advisory
github.com/jeedom/core/releasesnvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.