22 matches found
CVE-2021-27285
CVE-2021-27285 The Inspur ClusterEngine cluster management platform is a job management software specifically designed for Inspur TianSuo series HPC products. Inspur ClusterEngine has an improper SUID configuration issue, which allows non-administrative users to escalate privileges through certai...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2020-21224
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2021-27285: Incorrect Default Permissions
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
PT-2025-1354
Name of the Vulnerable Software and Affected Versions Inspur ClusterEngine version 4.0 Description An issue was discovered that allows attackers to gain escalated local privileges and execute arbitrary commands via the /opt/tsce4/torque6/bin/getJobsByShell endpoint. Recommendations For Inspur...
Inspur ClusterEngine 安全漏洞
Inspur ClusterEngine is an application from China's Wave Inspur Inc. It provides management of jobs submitted by hardware and software in a cluster system. A security vulnerability exists in Inspur ClusterEngine v4.0 that originated from allowing an attacker to gain escalated local privileges and...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2021-27285
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...
CVE-2021-27285
Inspur ClusterEngine v4.0 is vulnerable to local privilege escalation due to an improper SUID configuration in the component /opt/tsce4/torque6/bin/getJobsByShell . This flaw allows non-administrative users to execute arbitrary commands and obtain root privileges on the system. To remediate this ...
VulnCheck KEV: CVE-2020-21224
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
Inspur ClusterEngine Remote Code Execution (CVE-2020-21224)
A remote code execution vulnerability exists in Inspur ClusterEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2020-21224
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
CVE-2020-21224
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
Remote code execution
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
CVE-2020-21224
A Remote Code Execution (RCE) vulnerability exists in Inspur ClusterEngine V4.0 due to improper handling of arguments involving the 'yte parameter. A remote attacker can exploit this by sending a malicious login packet to the control server, potentially allowing them to execute arbitrary code on...
CVE-2020-21224
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...
CVE-2020-21224: Improper Neutralization of Argument Delimiters in a Command
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...