CVE-2022-21699

2022-01-1900:00:00

ubuntu.com

ipython

command shell

arbitrary code execution

multiple languages

vulnerability

temporary files

cross-user

upgrade

unix

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

29.4%

JSON

IPython (Interactive Python) is a command shell for interactive computing
in multiple programming languages, originally developed for the Python
programming language. Affected versions are subject to an arbitrary code
execution vulnerability achieved by not properly managing cross user
temporary files. This vulnerability allows one user to run code as another
on the same machine. All users are advised to upgrade.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchipython< 5.5.0-1ubuntu0.1~esm1UNKNOWN
ubuntu20.04noarchipython< 7.13.0-1ubuntu0.1~esm1UNKNOWN