CVE-2021-42559

An issue was discovered in CALDERA 2.8.1

published January 12, 2022

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01957 · 80.1th percentile
Published
2022-01-12T19:11Z
EPSS history
Timeline
  • 12 JAN 19:11Z
    An issue was discovered in CALDERA 2.8.1
    cvelistv5