deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-2441
Published: 2021-07-21
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 4.9 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.oracle.com/security-alerts/cpujul2021.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-2442
Published: 2021-07-21
Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
CVSS Score: 6.0 (MEDIUM)
References: https://security.gentoo.org/glsa/202208-36; https://www.oracle.com/security-alerts/cpujul2021.html; https://security.gentoo.org/glsa/202208-36
CVE: CVE-2021-2443
Published: 2021-07-21
Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: This vulnerability applies to Solaris x86 and Linux systems only. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
CVSS Score: 7.3 (HIGH)
References: https://security.gentoo.org/glsa/202208-36; https://www.oracle.com/security-alerts/cpujul2021.html; https://security.gentoo.org/glsa/202208-36
CVE: CVE-2021-2444
Published: 2021-07-21
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 4.9 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.oracle.com/security-alerts/cpujul2021.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-2445
Published: 2021-07-21
Description: Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N).
CVSS Score: 5.7 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujul2021.html; https://www.oracle.com/security-alerts/cpujul2021.html
CVE: CVE-2021-2446
Published: 2021-07-21
Description: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop. CVSS 3.1 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 9.6 (CRITICAL)
References: https://www.oracle.com/security-alerts/cpujul2021.html; https://www.oracle.com/security-alerts/cpujul2021.html
CVE: CVE-2021-2447
Published: 2021-07-21
Description: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 9.9 (CRITICAL)
References: https://www.oracle.com/security-alerts/cpujul2021.html; https://www.oracle.com/security-alerts/cpujul2021.html
CVE: CVE-2021-34365
Published: 2021-07-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-34366
Published: 2021-07-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-34367
Published: 2021-07-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-34368
Published: 2021-07-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-34619
Published: 2021-07-21
Description: The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-434, CWE-352
References: https://plugins.trac.wordpress.org/browser/woocommerce-stock-manager/trunk/admin/views/import-export.php?rev=2499178; https://www.wordfence.com/blog/2021/06/high-severity-vulnerability-patched-in-woocommerce-stock-manager-plugin/; https://plugins.trac.wordpress.org/browser/woocommerce-stock-manager/trunk/admin/views/import-export.php?rev=2499178
CVE: CVE-2021-37155
Published: 2021-07-21
Description: wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/wolfSSL/wolfssl/pull/3990; https://github.com/wolfSSL/wolfssl/releases/tag/v4.8.0-stable; https://github.com/wolfSSL/wolfssl/pull/3990
CVE: CVE-2021-37159
Published: 2021-07-21
Description: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-415, CWE-416
References: https://bugzilla.suse.com/show_bug.cgi?id=1188601; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6ecfb39ba9d7316057cea823b196b734f6b18ca; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dcb713d53e2eadf42b878c12a471e74dc6ed3145
CVE: CVE-2021-21407
Published: 2021-07-21
Description: Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser procedure. The vulnerability is patched in version 2.7.4 and 3.0.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/Combodo/iTop/security/advisories/GHSA-9wq8-4qm9-3j6f; https://github.com/Combodo/iTop/security/advisories/GHSA-9wq8-4qm9-3j6f
CVE: CVE-2021-23408
Published: 2021-07-21
Description: This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser could be tricked into adding or modifying properties of Object.prototype using a constructor or __proto__ payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1321
References: https://github.com/graphhopper/graphhopper/pull/2370; https://github.com/graphhopper/graphhopper/releases/tag/3.1; https://github.com/graphhopper/graphhopper/releases/tag/3.2
CVE: CVE-2021-32744
Published: 2021-07-21
Description: Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthenticated attackers are able to gain access to files which are currently opened by other users in the Collabora Online editor. For successful exploitation the attacker is required to guess the file identifier - the predictability of this file identifier is dependent on external file-storage implementations (this is a potential "IDOR" - Insecure Direct Object Reference - vulnerability). Versions 4.2.17-1 and 6.4.9-5 contain patches for this issue. There is no known workaround except updating the Collabora Online application to one of the patched releases.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-32xj-9x82-q9jw; https://github.com/CollaboraOnline/online/security/advisories/GHSA-32xj-9x82-q9jw
CVE: CVE-2020-22148
Published: 2021-07-21
Description: A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Piwigo/Piwigo/issues/1157; https://github.com/Piwigo/Piwigo/issues/1157
CVE: CVE-2020-22150
Published: 2021-07-21
Description: A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Piwigo/Piwigo/issues/1158; https://github.com/Piwigo/Piwigo/issues/1158
CVE: CVE-2021-23410
Published: 2021-07-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-19463
Published: 2021-07-21
Description: An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://cwe.mitre.org/data/definitions/770.html; https://github.com/flexpaper/pdf2json/issues/24; https://cwe.mitre.org/data/definitions/770.html
CVE: CVE-2020-19464
Published: 2021-07-21
Description: An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://cwe.mitre.org/data/definitions/770.html; https://github.com/flexpaper/pdf2json/issues/25; https://cwe.mitre.org/data/definitions/770.html
CVE: CVE-2020-19465
Published: 2021-07-21
Description: An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/flexpaper/pdf2json/issues/26; https://github.com/flexpaper/pdf2json/issues/26
CVE: CVE-2020-19466
Published: 2021-07-21
Description: An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/flexpaper/pdf2json/issues/27; https://github.com/flexpaper/pdf2json/issues/27
CVE: CVE-2020-19467
Published: 2021-07-21
Description: An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/flexpaper/pdf2json/issues/28; https://github.com/flexpaper/pdf2json/issues/28
CVE: CVE-2020-19468
Published: 2021-07-21
Description: An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/flexpaper/pdf2json/issues/29; https://github.com/flexpaper/pdf2json/issues/29
CVE: CVE-2020-19469
Published: 2021-07-21
Description: An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/flexpaper/pdf2json/issues/30; https://github.com/flexpaper/pdf2json/issues/30
CVE: CVE-2020-19470
Published: 2021-07-21
Description: An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/flexpaper/pdf2json/issues/31; https://github.com/flexpaper/pdf2json/issues/31
CVE: CVE-2020-19471
Published: 2021-07-21
Description: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/flexpaper/pdf2json/issues/32; https://github.com/flexpaper/pdf2json/issues/32
CVE: CVE-2020-19472
Published: 2021-07-21
Description: An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/flexpaper/pdf2json/issues/33; https://github.com/flexpaper/pdf2json/issues/33
CVE: CVE-2020-19473
Published: 2021-07-21
Description: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://github.com/flexpaper/pdf2json/issues/34; https://github.com/flexpaper/pdf2json/issues/34
CVE: CVE-2020-19474
Published: 2021-07-21
Description: An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/flexpaper/pdf2json/issues/35; https://github.com/flexpaper/pdf2json/issues/35
CVE: CVE-2020-19475
Published: 2021-07-21
Description: An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/flexpaper/pdf2json/issues/36; https://github.com/flexpaper/pdf2json/issues/36
CVE: CVE-2020-19481
Published: 2021-07-21
Description: An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7; https://github.com/gpac/gpac/issues/1265; https://github.com/gpac/gpac/issues/1266
CVE: CVE-2020-19488
Published: 2021-07-21
Description: An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/[PII_REDACTED]f4dda310e98ef7508477b425c58d09; https://github.com/gpac/gpac/issues/1263; https://github.com/gpac/gpac/commit/[PII_REDACTED]f4dda310e98ef7508477b425c58d09
CVE: CVE-2020-19490
Published: 2021-07-21
Description: tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/syoyo/tinyexr/commit/a685e3332f61cd4e59324bf3f669d36973d64270; https://github.com/syoyo/tinyexr/issues/124; https://github.com/syoyo/tinyexr/commit/a685e3332f61cd4e59324bf3f669d36973d64270
CVE: CVE-2020-19491
Published: 2021-07-21
Description: There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/pts/sam2p/commit/1d62cf8964bfcafa6561c4c3bb66d4aa4c529a73; https://github.com/pts/sam2p/issues/67; https://github.com/pts/sam2p/commit/1d62cf8964bfcafa6561c4c3bb66d4aa4c529a73
CVE: CVE-2020-19492
Published: 2021-07-21
Description: There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
References: https://github.com/pts/sam2p/commit/b953f63307c4a83fa4615a4863e3fb250205cd98; https://github.com/pts/sam2p/issues/66; https://github.com/pts/sam2p/commit/b953f63307c4a83fa4615a4863e3fb250205cd98
CVE: CVE-2020-19497
Published: 2021-07-21
Description: Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/tbeu/matio/commit/5fa49ef9fc4368fe3d19b5fdaa36d8fa5e7f4606; https://github.com/tbeu/matio/issues/121; https://github.com/tbeu/matio/commit/5fa49ef9fc4368fe3d19b5fdaa36d8fa5e7f4606
CVE: CVE-2020-19498
Published: 2021-07-21
Description: Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
CVSS Score: 8.8 (HIGH)
References: https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58; https://github.com/strukturag/libheif/issues/139; https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58
CVE: CVE-2020-19499
Published: 2021-07-21
Description: An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/strukturag/libheif/commit/f7399b62d7fbc596f1b2871578c1d2053bedf1dd; https://github.com/strukturag/libheif/issues/138; https://github.com/strukturag/libheif/commit/f7399b62d7fbc596f1b2871578c1d2053bedf1dd
CVE: CVE-2021-32745
Published: 2021-07-21
Description: Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside the context of the Collabora Online iframe. This would give access to a small set of user settings stored in the browser, as well as the session's authentication token which was also passed in at iframe creation time. The issue is patched in Collabora Online 6.4.9-5. Collabora Online 4.2 is not affected.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-w536-654v-cjj9; https://github.com/CollaboraOnline/online/security/advisories/GHSA-w536-654v-cjj9
CVE: CVE-2021-34816
Published: 2021-07-21
Description: An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.
CVSS Score: 7.2 (HIGH)
CWE: CWE-88
References: https://blog.sonarsource.com/etherpad-code-execution-vulnerabilities; https://github.com/ether/etherpad-lite/releases; https://blog.sonarsource.com/etherpad-code-execution-vulnerabilities
CVE: CVE-2021-35482
Published: 2021-07-21
Description: An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution (with user privileges of the local user) on any device that tries to connect to a WePresent presentation system.
CVSS Score: 7.8 (HIGH)
References: https://www.barco.com/en/support/software/R33050099?majorVersion=2&minorVersion=5&patchVersion=4&buildVersion=70; https://www.barco.com/en/support/software/R33050099?majorVersion=2&minorVersion=5&patchVersion=4&buildVersion=70
CVE: CVE-2021-32756
Published: 2021-07-21
Description: ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to execute arbitrary code with root privileges on the host system. There are patches for this issue in releases named jansa-4, kasparov-2, and lasker-1. If possible, restrict users, via RBAC, to only the part of the application that they need access to. While MiqExpression is widely used throughout the product, restricting users can limit the surface of the attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-94
References: https://github.com/ManageIQ/manageiq/security/advisories/GHSA-32x4-vj4r-57rq; https://github.com/ManageIQ/manageiq/security/advisories/GHSA-32x4-vj4r-57rq