CVE-2021-31585

Опубликовано: 23 июн. 2021

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.

Ссылки

https://github.com/accellion/CVEs
Third Party Advisory
https://github.com/accellion/CVEs/blob/main/CVE-2021-31585.txt
Third Party Advisory
https://github.com/accellion/CVEs
Third Party Advisory
https://github.com/accellion/CVEs/blob/main/CVE-2021-31585.txt
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*

Версия до 7.3.1 (исключая)

EPSS

Процентиль: 40%

0.0018

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f357-rvv6-2423