CVE-2021-21957CWE-276

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0

High · published December 8, 2021

CVSS v3.0
8.8
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01244 · 69.0th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-12-08T21:29Z
EPSS history
Timeline
  • 08 DEC 21:29Z
    A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0
    cvelistv5