CVE-2021-35939

🗓️ 01 Jul 2021 17:51:18Reported by redhat.comType

Incomplete fix for directory traversal vulnerability can lead to local unprivileged user gaining root privileges, impacting data confidentiality, integrity, and system availability

Reporter	Title	Published	Views	Family All 211
FreeBSD	rpm4 -- Multiple Vulnerabilities	22 Aug 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to an Improper Link Resolution Before File Access ('Link Following') in the RHEL UBI (CVE-2021-35939)	5 Aug 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Aug 202514:19	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	7 Mar 202414:53	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-rpm, rpm, rpm-apidocs (ALAS2023-2024-573)	21 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0030: rpm (ALINUX3-SA-2024:0030)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : rpm (ALSA-2024:0463)	26 Jan 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : rpm (ALSA-2024:0647)	2 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 8 : rpm (CESA-2024:0647)	1 Feb 202400:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35939
rpm	www.rpm.org/wiki/Releases/4.18.0
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

20 Apr 2024 03:40Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.2

CVSS 37.3 - 7.8

CVSS 3.16.5 - 6.7

EPSS0.00481