CVE-2022-21699CWE-250CWE-279

Execution with Unnecessary Privileges in ipython

High · published January 19, 2022

CVSS v3.1
8.2
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Weaknesses
CWE-250 · Execution with Unnecessary Privileges; CWE-279 · Incorrect Execution-Assigned Permissions
Published
2022-01-19T21:15Z
EPSS history
Timeline
  • 19 JAN 21:15Z
    Execution with Unnecessary Privileges in ipython
    cvelistv5