CVE-2021-4106

Published: Feb 16, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0

Affected (1)

Products: Snowsoftware: Snow Inventory Java Scanner

Snowsoftware

1 product

Snow Inventory Java Scanner

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Snowsoftware Snow Inventory Java Scanner	Version 1.0

Related CWEs

CWE-691

Insufficient Control Flow Management

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

References (2)

https://community.snowsoftware.com/s/feed/0D5690000BObYdUCQV

Source: security@snowsoftware.com

Vendor Advisory

https://community.snowsoftware.com/s/feed/0D5690000BObYdUCQV

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.