CVE-2021-28249

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library

published March 26, 2021

CVSS
—
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.8th percentile
Published
2021-03-26T07:11Z
EPSS history
Timeline
  • 26 MAR 07:11Z
    CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library
    cvelistv5