{"schemaVersion":3,"id":"CVE-2021-22876","aliases":["ALPINE-CVE-2021-22876","SUSE-SU-2021:1396-1","SUSE-SU-2021:14707-1","UBUNTU-CVE-2021-22876","USN-4903-1","DEBIAN-CVE-2021-22876","DLA-2664-1"],"status":"published","duplicateOf":null,"title":null,"description":"curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.","dates":{"published":"2021-04-01T17:45:18.000Z","modified":"2026-10-14T10:10:07.988Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05301,"percentile":0.9249,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.05301},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05301,"percentile":0.9249}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05301,"percentile":0.9249}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_B186D343226A895A","name":"Exploit Reference (hackerone.com)","source":"reference","url":"https://hackerone.com/reports/1101882","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-359","name":"Exposure of Private Personal Information to an Unauthorized Actor","description":"The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/359.html"},{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"alpine","product":"curl","name":"curl","label":"curl","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/curl","purlType":"apk","versions":[{"text":"< 7.76.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.76.0-r0","eol":null,"hubHref":null},{"vendor":"broadcom","product":"fabric_operating_system","name":"fabric operating system","label":"fabric_operating_system","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/broadcom/fabric_operating_system"},{"vendor":"debian","product":"curl","name":"curl","label":"curl","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/curl","purlType":"deb","versions":[{"text":"< 7.52.1-5+deb9u14","noFixRecorded":false,"fixedIn":null},{"text":"< 7.74.0-1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.52.1-5+deb9u14 | < 7.74.0-1.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"curl","name":"curl","label":"curl","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/curl","purlType":"deb","versions":[{"text":"< 7.47.0-1ubuntu2.19","noFixRecorded":false,"fixedIn":null},{"text":"< 7.58.0-2ubuntu3.13","noFixRecorded":false,"fixedIn":null},{"text":"< 7.68.0-1ubuntu2.5","noFixRecorded":false,"fixedIn":null},{"text":"< 7.35.0-1ubuntu2.20+esm7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.47.0-1ubuntu2.19 | < 7.58.0-2ubuntu3.13 | < 7.68.0-1ubuntu2.5 | < 7.35.0-1ubuntu2.20+esm7","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"32","noFixRecorded":false,"fixedIn":null},{"text":"33","noFixRecorded":false,"fixedIn":null},{"text":"34","noFixRecorded":false,"fixedIn":null}],"versionsText":"32 | 33 | 34","eol":{"isEol":true,"eolDate":"2021-05-25T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"32","label":"32","eolFrom":"2021-05-25T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"haxx","product":"libcurl","name":"libcurl","label":"libcurl","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.1.1, ≤ 7.75.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.1.1, ≤ 7.75.0","eol":null,"hubHref":"/vendor/haxx/libcurl"},{"vendor":"netapp","product":"hci_compute_node","name":"hci compute node","label":"hci_compute_node","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/hci_compute_node"},{"vendor":"netapp","product":"hci_management_node","name":"hci management node","label":"hci_management_node","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/hci_management_node"},{"vendor":"netapp","product":"hci_storage_node_firmware","name":"hci storage node firmware","label":"hci_storage_node_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/hci_storage_node"},{"vendor":"netapp","product":"solidfire","name":"solidfire","label":"solidfire","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/solidfire"},{"vendor":"oracle","product":"communications_billing_and_revenue_management","name":"communications billing and revenue management","label":"communications_billing_and_revenue_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.0.0.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.0.0.3.0","eol":null,"hubHref":"/vendor/oracle/communications_billing_and_revenue_management"},{"vendor":"oracle","product":"essbase","name":"essbase","label":"essbase","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"21.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"21.2","eol":null,"hubHref":"/vendor/oracle/essbase"},{"vendor":"suse","product":"curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY","name":"curl-openssl1","label":"curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY","purlType":"rpm","versions":[{"text":"< 7.37.0-70.60.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.37.0-70.60.1","eol":null,"hubHref":null},{"vendor":"suse","product":"curl&distro=SUSE Linux Enterprise Server 12 SP5","name":"curl","label":"curl&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/curl&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 7.60.0-11.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.60.0-11.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"curl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"curl","label":"curl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/curl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 7.60.0-11.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.60.0-11.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"curl&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"curl","label":"curl&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/curl&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 7.60.0-11.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.60.0-11.15.1","eol":null,"hubHref":null},{"vendor":"siemens","product":"sinec_infrastructure_network_services","name":"sinec infrastructure network services","label":"sinec_infrastructure_network_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.0.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1.1","eol":null,"hubHref":"/vendor/siemens/sinec_infrastructure_network_services"},{"vendor":"splunk","product":"universal_forwarder","name":"universal forwarder","label":"universal_forwarder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.2.0, < 8.2.12","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.6","noFixRecorded":false,"fixedIn":null},{"text":"9.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.2.0, < 8.2.12 | ≥ 9.0.0, < 9.0.6 | 9.1.0","eol":null,"hubHref":"/vendor/splunk/universal_forwarder"}],"affectedCount":19,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://hackerone.com/reports/1101882","label":"hackerone.com/reports/1101882","hostname":"hackerone.com","tags":["X Refsource MISC","Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://curl.se/docs/CVE-2021-22876.html","label":"curl.se/docs/CVE-2021-22876.html","hostname":"curl.se","tags":["X Refsource MISC","REPORT","Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html","label":"lists.debian.org/debian-lts-announce/2021/05/msg00019.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202105-36","label":"security.gentoo.org/glsa/202105-36","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"www.oracle.com//security-alerts/cpujul2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210521-0007/","label":"security.netapp.com/advisory/ntap-20210521-0007/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-22876","label":"security.alpinelinux.org/vuln/CVE-2021-22876","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211396-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20211396-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1183933","label":"bugzilla.suse.com/1183933","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22876","label":"www.suse.com/security/cve/CVE-2021-22876","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114707-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-202114707-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-22876","label":"ubuntu.com/security/CVE-2021-22876","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4898-1","label":"ubuntu.com/security/notices/USN-4898-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4903-1","label":"ubuntu.com/security/notices/USN-4903-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22876","label":"www.cve.org/CVERecord?id=CVE-2021-22876","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-22876","label":"security-tracker.debian.org/tracker/CVE-2021-22876","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","label":"cert-portal.siemens.com/productcert/html/ssa-389290.html","hostname":"cert-portal.siemens.com","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"cert-portal.siemens.com/productcert/html/ssa-398330.html","hostname":"cert-portal.siemens.com","tags":[]}],"lineage":{"upstream":[],"downstream":["DSA-4881-1","MGASA-2021-0186","OPENSUSE-SU-2021:0510-1","OPENSUSE-SU-2024:10582-1","RHSA-2021:2472","RHSA-2021:4511","RHSA-2022:1354","SUSE-SU-2021:1006-1","SUSE-SU-2021:1786-1","SUSE-SU-2021:1809-1","USN-4898-1"],"duplicates":[],"related":["OPENSUSE-SU-2021:0510-1","OPENSUSE-SU-2024:10582-1","SUSE-SU-2021:1006-1","SUSE-SU-2021:1786-1","SUSE-SU-2021:1809-1","USN-4898-1"]},"timeline":[{"kind":"published","date":"2021-04-01T17:45:18.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T10:10:07.988Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:22:21.323Z","stale":false,"partial":false}}