Lucene search

CVE-2021-4326

🗓️ 01 Mar 2023 08:10:15Reported by [email protected]Type

Vulnerability in Imperative framework allows local actors to execute arbitrary shell commands via plugin install/update commands, or malicious environment variables. Impacts Zowe CLI

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Veracode	Command Injection	4 Mar 202307:36	–	veracode
Prion	Design/Logic Flaw	1 Mar 202308:15	–	prion
Cvelist	CVE-2021-4326 Imperative Local Command Injection allows Activity Masking	22 Feb 202315:21	–	cvelist
OSV	CVE-2021-4326	1 Mar 202308:15	–	osv
OSV	GHSA-6Q8M-42QQ-64R7 Imperative CLI vulnerable to Command Injection	1 Mar 202309:30	–	osv
CVE	CVE-2021-4326	1 Mar 202308:15	–	cve
Github Security Blog	Imperative CLI vulnerable to Command Injection	1 Mar 202309:30	–	github

Nvd

Node

linuxfoundation zoweRange1.16.0–1.28.2

linuxfoundation zoweRange2.0.0–2.5.0

Source	Link
github	www.github.com/zowe/imperative/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Mar 2023 08:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS33.3 - 7.8

EPSS0.00021