IM
IronMonkey Threat Research

CVE-2021-3426 MEDIUM

Published: 2021-05-20 | Last Modified: 2025-12-18 | Status: Modified

Description

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

Additional Descriptions (1)

Se presenta un fallo en pydoc de Python versión 3. Un atacante local o adyacente que descubre o es capaz de convencer a otro usuario local o adyacente para que iniciar un servidor pydoc podría acceder al servidor y usarlo para divulgar información confidencial perteneciente al otro usuario al que normalmente no podría acceder. El mayor riesgo de este fallo es la confidencialidad de los datos. Este fallo afecta a Python versiones anteriores a 3.8.9, Python versiones anteriores a 3.9.3 y Python versiones anteriores a 3.10.0a7

CVSS Metrics

Base Score: 5.7 (MEDIUM)

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorADJACENT_NETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.1

Impact Score: 3.6

Base Score: 2.7 (LOW)

AV:A/AC:L/Au:S/C:P/I:N/A:N

Access VectorADJACENT_NETWORK
Access ComplexityLOW
AuthenticationSINGLE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 5.1

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-200
[email protected] Primary
en CWE-22

Affected Products

Vendor Product Version Update Type
python python * <built-in method update of dict object at 0x7fd3401d28c0> Application
python python * <built-in method update of dict object at 0x7fd3401d2000> Application
python python * <built-in method update of dict object at 0x7fd36b7d4600> Application
python python * <built-in method update of dict object at 0x7fd384210700> Application
python python * <built-in method update of dict object at 0x7fd3401d3d40> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd3401d2580> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd36945c6c0> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd36945f2c0> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd3401d1b00> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd3401d1a40> Application
python python 3.10.0 <built-in method update of dict object at 0x7fd3401d0340> Application
fedoraproject fedora 32 <built-in method update of dict object at 0x7fd3697d6e00> Operating System
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd3401d01c0> Operating System
fedoraproject fedora 34 <built-in method update of dict object at 0x7fd3401d15c0> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd3855daf00> Operating System
redhat software_collections - <built-in method update of dict object at 0x7fd368e899c0> Application
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd3401d2180> Operating System
netapp cloud_backup - <built-in method update of dict object at 0x7fd36945ddc0> Application
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd3401d2040> Application
netapp snapcenter - <built-in method update of dict object at 0x7fd36b59dac0> Application
oracle communications_cloud_native_core_binding_support_function 1.10.0 <built-in method update of dict object at 0x7fd3697d7d40> Application
oracle zfs_storage_appliance_kit 8.8 <built-in method update of dict object at 0x7fd3401d2bc0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha2:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha3:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha4:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha5:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.10.0:alpha6:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

References