Lucene search
China National Vulnerability DatabaseCNVD-2022-08170HistoryJan 16, 2022 - 12:00 a.m.
Caldera Command Injection Vulnerability
2022-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
caldera
command injection
vulnerability
rest api
authenticated attacker
arbitrary commands
EPSS
0.001
Percentile
30.5%
A command injection vulnerability exists in Caldera 2.8.1 and earlier, which stems from multiple startup “requirements” that execute commands when starting a server that commands can be changed via the REST API. An authenticated attacker could use this vulnerability to insert arbitrary commands and restart execution.
Related
nvd
nvd
CVE-2021-42559
2022-01-12 20:15:08
osv
osv
CVE-2021-42559
2022-01-12 20:15:08
cvelist
cvelist
CVE-2021-42559
2022-01-12 19:11:03
prion
prion
Design/Logic Flaw
2022-01-12 20:15:00
cve
cve
CVE-2021-42559
2022-01-12 20:15:08