CVE-2021-38120CWE-77

Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication

Medium · published August 28, 2024

CVSS v3.1
5.1
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper

handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.3th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2024-08-28T06:28Z
EPSS history
Timeline
  • 28 AUG 06:28Z
    Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication
    cvelistv5