high8.8
CVE-2021-43397
LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
Impact
LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Liquidfiles | Liquidfiles | before 3.6.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164997/LiquidFiles-3.5.13-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2021/Nov/40
- http://seclists.org/fulldisclosure/2021/Nov/52
- https://forum.liquidfiles.com/forums/news.6/
- https://man.liquidfiles.com/release_notes/version_3-6-x.html
- http://packetstormsecurity.com/files/164997/LiquidFiles-3.5.13-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2021/Nov/40
- http://seclists.org/fulldisclosure/2021/Nov/52
- https://forum.liquidfiles.com/forums/news.6/
- https://man.liquidfiles.com/release_notes/version_3-6-x.html