Lucene search

K
vulnrichmentOpenTextVULNRICHMENT:CVE-2021-38120
HistoryAug 28, 2024 - 6:28 a.m.

CVE-2021-38120 Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication

2024-08-2806:28:55
CWE-77
OpenText
github.com
1
vulnerability
netiq advance authentication
remote code execution
bash command injection
backup functionality.

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

19.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper
handling in providedΒ command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

19.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2021-38120