CVE-2021-33658

CVE-2021-33658 affects atune (A-Tune) before 0.3-0.8. The issue arises from authenticating as a local user and running curl to access the local atune URL interface, enabling local privilege escalation or file modification. The default configuration does not enforce authentication, enabling unauth...