Lucene search
CVE-2021-45466
CVE-2021-45466: CWP before 0.9.8.1107 allows unauthorized file addition
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2021-45466 | 26 Dec 202205:15 | – | nvd |
 | Design/Logic Flaw | 26 Dec 202205:15 | – | prion |
 | CVE-2021-45466 | 26 Dec 202200:00 | – | cvelist |
 | Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks | 22 Jan 202204:04 | – | thn |
 | CWP Panel Remote Code Execution (CVE-2021-45467; CVE-2021-45466) | 27 Feb 202200:00 | – | checkpoint_advisories |
 | Linux Servers at Risk of RCE Due to Critical CWP Bugs | 24 Jan 202223:08 | – | threatpost |
Node
| Source | Link |
|---|---|
| octagon | www.octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce/ |
| control-webpanel | www.control-webpanel.com/changelog |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| api | query param | /api/ | Allows unauthorized addition of authorized_keys file in resources folder due to improper validation of parameters. | CWE-863 |
| DHCP | query param | /api/ | Allows unauthorized addition of authorized_keys file in resources folder due to improper validation of parameters. | CWE-863 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo26 Dec 2022 05:15Current
9.2High risk
Vulners AI Score9.2
CVSS39.8
EPSS0.13811