CVE-2021-42559

CVE-2021-42559: Befehlseinschleusung über Konfigurationen in MITRE Caldera Caldera Versionen =2.8.1 enthält mehrere Start-„Requirements“, die beim Starten des Servers Befehle ausführen. Da diese Befehle über die REST-API geändert werden können, kann ein authentifizierter Benutzer beliebige Befehl...

Design/Logic Flaw

An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted...

Caldera 命令注入漏洞

A command injection vulnerability exists in Caldera 2.8.1 and earlier, which stems from multiple startup "requirements" that execute commands when starting a server that commands can be changed via the REST API. An authenticated attacker could use this vulnerability to insert arbitrary commands a...