CVE-2021-36100

Authenticated remote code execution

Medium · published March 21, 2022

CVSS v3.1
6.4
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

Specially crafted string in OTRS system configuration can allow the execution of any system command.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Published
2022-03-21T09:15Z
EPSS history
Timeline
  • 21 MAR 09:15Z
    Authenticated remote code execution
    cvelistv5