Lucene search

K
cvelistMitreCVELIST:CVE-2021-45809
HistoryMar 22, 2022 - 10:30 a.m.

CVE-2021-45809

2022-03-2210:30:20
mitre
www.cve.org
7
globalprotect-openconnect
access control
vulnerability
gui application
dbus

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

61.2%

GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the --script=<script> parameter.

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

61.2%

Related for CVELIST:CVE-2021-45809