Skip to content
fr Sign in
3.3 Low

CVE-2021-4326 A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands…

Description

A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.

Affected products and versions

Product Affected versions Fixed in
Zowe 2.0 2.0.0 → < 2.5.0 2.5.0
Zowe 1.16 1.16.0 → < 1.28.2 1.28.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Zowe

The 6 CVEs of Zowe →
CVE-2024-9802 The conformance validation endpoint is public so everybody can verify the conformance of onboarded services 5.3 Medium CVE-2024-9798 The health endpoint is public so everybody can see a list of all services 5.3 Medium CVE-2024-6834 A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by… 9.0 Critical CVE-2024-6833 A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a… 5.9 Medium
Track this CVE