1. Home
  2. CVE Database
  3. CVE-2021-34802
HIGH · 8.8

CVE-2021-34802

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.

Vulnerability Description

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Neo4JGraph Databse4.2

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2021-34802?

CVE-2021-34802 is a vulnerability with a CVSS score of 8.8 (HIGH). A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.

How severe is CVE-2021-34802?

CVE-2021-34802 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34802?

Check the references section above for vendor advisories and patch information. Affected products include: Neo4J Graph Databse.