Lucene search
K

CVE-2021-31997 python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root

🗓️ 10 Jun 2021 11:35:11Reported by suseType 
cvelist
 cvelist
🔗 www.cve.org👁 17 Views

CVE-2021-31997 python-postorius allows local privilege escalation to roo

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the Postorius-permissions.sh web interface implementation allows a hacker to escalate their privileges.
23 Jun 202100:00
bdu_fstec
CNNVD
openSUSE 后置链接漏洞
10 Jun 202100:00
cnnvd
CVE
CVE-2021-31997
10 Jun 202111:35
cve
Debian CVE
CVE-2021-31997
10 Jun 202111:35
debiancve
EUVD
EUVD-2021-18868
7 Oct 202500:30
euvd
NVD
CVE-2021-31997
10 Jun 202112:15
nvd
OSV
CVE-2021-31997
10 Jun 202112:15
osv
OSV
OPENSUSE-SU-2024:12306-1 postorius-1.3.6-1.1 on GA media
15 Jun 202400:00
osv
Prion
Design/Logic Flaw
10 Jun 202112:15
prion
Positive Technologies
PT-2021-3365 · Suse · Opensuse Leap
18 Feb 202100:00
ptsecurity
Rows per page
[
  {
    "vendor": "openSUSE",
    "product": "Leap 15.2",
    "versions": [
      {
        "version": "python-postorius",
        "status": "affected",
        "lessThanOrEqual": "1.3.2-lp152.1.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "openSUSE",
    "product": "Factory",
    "versions": [
      {
        "version": "python-postorius",
        "status": "affected",
        "lessThanOrEqual": "1.3.4-2.1",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Oct 2022 00:00Current
7.8High risk
Vulners AI Score7.8
CVSS 3.16.8
EPSS0.00035
17