CVE-2021-40612

2021-12-2213:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%

JSON

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.

CPENameOperatorVersion
open-auditeqOpen-AudIT_2.0.6
open-auditeqOpen-AudIT_2.2.1
open-auditeqOpen-AudIT_2.2.0
open-auditeqOpen-AudIT_2.0.2
open-auditeqOpen-AudIT_2.0.6_beta
open-auditeqOpen-AudIT_2.3.0
open-auditeqOpen-AudIT_3.1.0
open-auditeqOpen-AudIT_3.2.2
open-auditeqOpen-AudIT_4.1.2
open-auditeqOpen-AudIT_1.12.8

Name	Operator	Version
open-audit	eq	Open-AudIT_2.0.6
open-audit	eq	Open-AudIT_2.2.1
open-audit	eq	Open-AudIT_2.2.0
open-audit	eq	Open-AudIT_2.0.2
open-audit	eq	Open-AudIT_2.0.6_beta
open-audit	eq	Open-AudIT_2.3.0
open-audit	eq	Open-AudIT_3.1.0
open-audit	eq	Open-AudIT_3.2.2
open-audit	eq	Open-AudIT_4.1.2
open-audit	eq	Open-AudIT_1.12.8