{"id":"CVE-2021-38388","state":"PUBLISHED","title":"Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.","description":"Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.","publishedAt":"2021-09-08T17:50:45.000Z","updatedAt":"2025-05-12T01:31:17.817Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"LY-Corporation"},"assigner":"LINE","products":["LINE Corporation Central Dogma"],"affected":[{"vendor":"LINE Corporation","product":"Central Dogma","versions":[{"version":"0.51.1","status":"affected","lessThan":"0.52.0","versionType":"custom"}]}],"references":["https://github.com/line/centraldogma/pull/621"],"weaknesses":[],"ingestedAt":"2026-10-29T19:48:49.871Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/38xxx/CVE-2021-38388.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-38388","state":"PUBLISHED","datePublished":"2021-09-08T17:50:45.000Z","dateUpdated":"2025-05-12T01:31:17.817Z","assignerShortName":"LINE","assignerOrgId":"657f3255-0560-4aed-82e4-7f579ec6acfb","dateReserved":"2021-08-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project."}],"affected":[{"vendor":"LINE Corporation","product":"Central Dogma","versions":[{"version":"0.51.1","status":"affected","lessThan":"0.52.0","versionType":"custom"}]}],"references":[{"url":"https://github.com/line/centraldogma/pull/621"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","exploitCodeMaturity":"NOT_DEFINED","remediationLevel":"NOT_DEFINED","reportConfidence":"NOT_DEFINED","temporalScore":8.8,"temporalSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NETWORK","modifiedAttackComplexity":"LOW","modifiedPrivilegesRequired":"LOW","modifiedUserInteraction":"NONE","modifiedScope":"UNCHANGED","modifiedConfidentialityImpact":"HIGH","modifiedIntegrityImpact":"HIGH","modifiedAvailabilityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"LY-Corporation","orgId":"657f3255-0560-4aed-82e4-7f579ec6acfb","dateUpdated":"2025-05-12T01:31:17.817Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/line/centraldogma/pull/621","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T01:37:16.527Z"}}]}}}