Lucene search
PRIOn knowledge basePRION:CVE-2021-30463HistoryApr 08, 2021 - 2:15 p.m.
Default credentials
2021-04-0814:15:00
PRIOn knowledge base
www.prio-n.com
6
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely.
| CPE | Name | Operator | Version |
|---|---|---|---|
| control_panel | eq | <= 0.9.8-24 |
Related
cve
cve
CVE-2021-30463
2021-04-08 14:15:14
osv
osv
CVE-2021-30463
2021-04-08 14:15:14
nvd
nvd
CVE-2021-30463
2021-04-08 14:15:14
cvelist
cvelist
CVE-2021-30463
2021-04-08 13:54:00