Lucene search
PRIOn knowledge basePRION:CVE-2021-31580HistoryJul 22, 2021 - 7:15 p.m.
Authentication flaw
2021-07-2219:15:00
PRIOn knowledge base
www.prio-n.com
3
The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 (and later), Akkadian Provisioning Manager 5.0.2 (and later), and Akkadian Appliance Manager 3.3.0.314-4a349e0 (and later).
| CPE | Name | Operator | Version |
|---|---|---|---|
| ova_appliance | lt | 3.0 | |
| provisioning_manager | ge | 3.0.0 | |
| provisioning_manager | lt | 3.3.0.314 | |
| provisioning_manager | ge | 4.0.0 | |
| provisioning_manager | lt | 5.0.2 |
Related
nvd
nvd
CVE-2021-31580
2021-07-22 19:15:08
cve
cve
CVE-2021-31580
2021-07-22 19:15:08
cvelist
cvelist
rapid7blog
rapid7blog
Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)
2021-06-08 14:00:00
threatpost
threatpost
Bugs Lurking in Cisco UC Provisioning Platform
2021-06-11 21:09:39