Request engagement

CVE-2021-41382

7.5 HIGH

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface

Published: 2021-09-22 · Last updated: 2026-06-17

Severity and scoring

CVSS: 7.5 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Vendor	Product
plasticscm	plastic_scm

Description

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-41382
[Exploit reference]http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
[Exploit reference]http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html
[Vendor advisory]https://www.plasticscm.com/download/releasenotes/10.0.16.5622
[Exploit reference]http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
[Exploit reference]http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html
[Vendor advisory]https://www.plasticscm.com/download/releasenotes/10.0.16.5622