CVE-2021-42559

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-42559

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42559.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-42559

Published

2022-01-12T20:15:08.380Z

Modified

2026-03-14T11:15:18.488293Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted.

References

Affected packages

Git / github.com/mitre/caldera

Affected ranges

Type

GIT

Repo

https://github.com/mitre/caldera

Events

Introduced

Last affected

29b1f26239ca1819c110cdab96de22938ce01450

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.8.1"
        }
    ]
}

Affected versions

2.*

2.0.0

2.1.0

2.3.0

2.3.1

2.6.0

2.6.1

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.64

2.6.65

2.7.0

2.8.0

2.8.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42559.json"