CVE-2021-42840

Conclusion: CVE-2021-42840 affects SuiteCRM

CVE-2021-42840

SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, loggerfilename can refer to an attacker-controlled PHP file under the web root, because only the all-lowercase PHP file extensions were...

SuiteCRM code-related vulnerabilities

SuiteCRM is a customer relationship management system from the SuiteCRM Suitecrm team. A security vulnerability exists in SuiteCRM that stems from SuiteCRM prior to 7.11.19 that allows remote code execution to be set via the system settings log file name. An attacker can exploit the vulnerability...

PT-2021-23694 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.11.19 Description: The issue allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, the logger file name can refer to an...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in the operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in the operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain system privileges...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in the operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain system privileges...

CVE-2021-40467

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40467

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40466

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40466

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40443

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40443

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40467

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40466

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40443

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-40467 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...