CVE-2021-33658 in atune

Riassunto

di MITRE • 11/03/2022

atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 28/05/2021
• Divulgazione: 11/03/2022
• Moderazione: accettato
• Voce: VDB-194821
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.00151
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-33658
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-33658
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-33658/