Design/Logic Flaw

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

CVE-2021-29873

CVE-2021-29873 affects IBM FlashSystem 900 and related IBM storage products (SVC/Storwize/Spectrum Virtualize family). A authenticated user could escape a restricted shell to obtain sensitive information and cause a denial of service. The IBM Security Bulletin lists the affected platforms (FlashS...

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

IBM Flash System 900 安全漏洞

Ibm Flash System 900 is a fully optimized all-flash storage array from Ibm, Inc. Used to accelerate business growth, the IBM Flash System 900 has a security vulnerability that stems from a shell escape vulnerability in the IBM Flash System 900. An attacker could exploit the vulnerability to obtai...

Design/Logic Flaw

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

CVE-2021-3540 Ivanti MobileIron Core clish Restricted Shell Escape via Argument Injection

By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...

CVE-2021-3540

CVE-2021-3540 affects Ivanti MobileIron Core. The flaw allows escaping the restricted clish shell via the install rpm info detail command, effectively a clish argument-injection vulnerability. Consequence is elevated/possibly complete impact on confidentiality, integrity, and availability per NVD...

CVE-2021-3198

Ivanti MobileIron Core is affected by CVE-2021-3198: an attacker can escape the restricted clish shell by abusing the 'install rpm url' command. Vulnerable versions exist prior to 11.1.0.0; the issue was fixed in version 11.1.0.0. The root cause is command-based escape from the clish shell. Remed...

CVE-2021-31581 Akkadian Provisioning Manager Engine (PME) Shell Escape via 'vi' editor interface

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

CVE-2021-31580 Akkadian Provisioning Manager Engine (PME) Shell Escape via 'exec' command

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-3198 and CVE-2021-3540: MobileIron Shell Escape Privilege Escalation Vulnerabilities

Ivanti MobileIron Core versions 10.7.0.1-9 and 11.0.0.1-3 suffer from two restricted shell escape vulnerabilities through the install rpm command present in the clish restricted shell. These issues have been fixed in version 11.1.0.0, released on March 15, 2021. The first, CVE-2021-3198, is an...

CVE-2021-3198

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...

SUSE: Security Advisory (SUSE-SU-2016:0092-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-21384

CVE-2021-21384 affects the JavaScript package shescape. Before version 1.1.3, the library potentially allowed shell injection if a payload could be crafted to bypass escaping (described as inserting into the payload). The vulnerability has been addressed in version 1.1.3, with no further changes ...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

UCOPIA Wi-Fi appliances OS Command Injection Vulnerability

A security vulnerability exists in Ucopia Express 6.0.5 that allows an authenticated, remote attacker to escape the restricted administrative shell CLI and access a shell with admin user privileges via unprotected less commands...

CVE-2020-29056

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices...

CVE-2020-29056

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices...

Arista Restricted Shell Escape - Privilege Escalation

This Metasploit module takes advantage of a poorly configured TACACS+ config, This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'Arista restricted...