Lucene search
HistoryJul 10, 2023 - 4:15 p.m.
CVE-2021-42081
authenticated admin
remote execution
shell commands
api
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
60.1%
An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API.
Affected configurations
Node
osnexusquantastorRange<6.0.0.355
| Vendor | Product | Version | CPE |
|---|---|---|---|
| osnexus | quantastor | * | cpe:2.3:a:osnexus:quantastor:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2021-42081
2023-07-10 16:15:47
prion
prion
Design/Logic Flaw
2023-07-10 16:15:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
60.1%
Related for NVD:CVE-2021-42081