CVE-2021-26557

2021-10-0701:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

CPENameOperatorVersion
octopustentacleeq6.0.365
octopustentacleeq6.0.375
octopustentacleeq6.0.386
octopustentacleeq6.0.466
octopustentacleeq6.0.445
octopustentacleeq6.0.454
octopustentacleeq6.0.356
octopustentacleeq6.0.325
octopustentacleeq6.0.462
octopustentacleeq6.0.394

Name	Operator	Version
octopustentacle	eq	6.0.365
octopustentacle	eq	6.0.375
octopustentacle	eq	6.0.386
octopustentacle	eq	6.0.466
octopustentacle	eq	6.0.445
octopustentacle	eq	6.0.454
octopustentacle	eq	6.0.356
octopustentacle	eq	6.0.325
octopustentacle	eq	6.0.462
octopustentacle	eq	6.0.394