7
CVE-2021-41617
- EPSS 0.37%
- Published 26.09.2021 19:15:07
- Last modified 21.11.2024 06:26:32
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version33
Fedoraproject ≫ Fedora Version34
Fedoraproject ≫ Fedora Version35
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Netapp ≫ Clustered Data Ontap Version-
Netapp ≫ Hci Management Node Version-
Netapp ≫ Ontap Select Deploy Administration Utility Version-
Netapp ≫ Aff A250 Firmware Version-
Netapp ≫ Aff 500f Firmware Version-
Oracle ≫ HTTP Server Version12.2.1.2.0
Oracle ≫ HTTP Server Version12.2.1.3.0
Oracle ≫ HTTP Server Version12.2.1.4.0
Oracle ≫ Zfs Storage Appliance Kit Version8.8
Starwindsoftware ≫ Starwind Virtual San Versionv8r13 Update14398
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.582 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.4 | 3.4 | 6.4 |
AV:L/AC:M/Au:N/C:P/I:P/A:P
|