{"id":"CVE-2021-45379","details":"Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.","modified":"2026-10-16T08:10:29.467178338Z","published":"2021-12-30T18:15:07.463Z","database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/babelouest/glewlwyd/releases/tag/v2.6.1"},{"type":"FIX","url":"https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/babelouest/glewlwyd","events":[{"introduced":"9ff7a039b873666099ad306bef0c13082902d39a"},{"fixed":"a7ddc5b3c2981cf15fc477fbd12397afcc559e4b"},{"fixed":"125281f1c0d4b6a8b49f7e55a757205a2ef01fbe"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:glewlwyd_project:glewlwyd:*:*:*:*:*:*:*:*","range":[{"introduced":"2.0.0"},{"fixed":"2.6.1"}],"source":"CPE_RANGE"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"125281f1c0d4b6a8b49f7e55a757205a2ef01fbe"}]},{"source":"REFERENCES_TAG","original_tag":"v2.6.1","range":[{"fixed":"a7ddc5b3c2981cf15fc477fbd12397afcc559e4b"}]}]}}],"versions":["v2.6.0","v2.5.3","v2.5.2","v2.5.1","v2.5.0","v2.4.0","v2.3.2","v2.3.1","v2.3.0","v2.2.0","v2.1.1","v2.1.0","v2.0.0"],"database_specific":{"vanir_signatures_modified":"2026-10-16T08:10:29Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-45379.json","vanir_signatures":[{"id":"CVE-2021-45379-262cbb68","signature_type":"Function","signature_version":"v1","source":"https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe","target":{"file":"src/webservice.c","function":"callback_glewlwyd_user_auth"},"deprecated":false,"digest":{"function_hash":"287385179160249100524275443818706698966","length":7507}},{"target":{"file":"src/webservice.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["160032509845577399718325785668694135536","159314386650147664546478821949250439871","97272558064739958032241681553684032162","318688609422231976619580614058765167857","21727593704607572632123644709356901167","311966006849433527990035948850796334565","87472205284720780937743638570090968232"]},"id":"CVE-2021-45379-c09008b9","signature_type":"Line","signature_version":"v1","source":"https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}