CVE-2021-41103 Insufficiently restricted permissions on plugin directories

🗓️ 04 Oct 2021 00:00:00Reported by GitHub_MType

CVE-2021-41103: Insufficiently restricted permissions on container

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-41103)	29 Oct 202117:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:50	–	ibm
Tenable Nessus	Amazon Linux 2 : containerd (ALAS-2022-016) (deprecated)	9 Mar 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd (ALASDOCKER-2022-016)	2 May 202200:00	–	nessus

[
  {
    "vendor": "containerd",
    "product": "containerd",
    "versions": [
      {
        "version": "< 1.4.11",
        "status": "affected"
      },
      {
        "version": ">= 1.5.0, < 1.5.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202401-31
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/
debian	www.debian.org/security/2021/dsa-5002
github	www.github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8
github	www.github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/

31 Jan 2024 13:06Current

8High risk

Vulners AI Score8

CVSS 35.9

EPSS0.00482

CWE-22