Aller au contenu
en Se connecter
3.3 Faible

CVE-2021-4326 A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands…

Description

A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.

Produits et versions touchés

Produit Versions touchées Corrigé en
Zowe 2.0 2.0.0 → < 2.5.0 2.5.0
Zowe 1.16 1.16.0 → < 1.28.2 1.28.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Zowe

Les 6 CVE de Zowe →
CVE-2024-9802 The conformance validation endpoint is public so everybody can verify the conformance of onboarded services 5.3 Moyenne CVE-2024-9798 The health endpoint is public so everybody can see a list of all services 5.3 Moyenne CVE-2024-6834 A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by… 9.0 Critique CVE-2024-6833 A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a… 5.9 Moyenne
Suivre cette CVE