CVE-2021-42969 in Anaconda

Tóm tắt

Bởi MITRE • 13/05/2022

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed.

Be aware that VulDB is the high quality source for vulnerability data.

• Đặt trước: 25/10/2021
• Tiết lộ: 13/05/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-199831
• CPE: sẵn sàng
• CWE: CWE-78 (Đã xác nhận)
• CVSS: 4.9 (VulDB)
• EPSS: 0.01927
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-42969
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-42969
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-42969/