CVE-2021-42559

CVE-2021-42559 : Injection de commandes via les configurations dans MITRE Caldera Caldera versions =2.8.1 contient plusieurs « exigences » de démarrage qui exécutent des commandes lors du démarrage du serveur. Comme ces commandes peuvent être modifiées via l'API REST, un utilisateur authentifié...

Design/Logic Flaw

An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted...

Caldera 命令注入漏洞

A command injection vulnerability exists in Caldera 2.8.1 and earlier, which stems from multiple startup "requirements" that execute commands when starting a server that commands can be changed via the REST API. An authenticated attacker could use this vulnerability to insert arbitrary commands a...