PT-2021-16984 · Ninjarmm · Ninjarmm

Published 2021-07-07 · Updated 2021-07-08 · CVE-2021-26274

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions NinjaRMM version 5.0.909

Description The issue concerns Insecure Permissions and Incorrect Access Control in the Agent component.

Recommendations For NinjaRMM version 5.0.909, update to a version that addresses the Insecure Permissions and Incorrect Access Control issues.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-26274

Affected Products

Ninjarmm

References · 7

• 🔥 https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm · Exploit
• https://osv.dev/vulnerability/CVE-2021-26274 · Vendor Advisory
• https://ninjarmm.com · Vendor Advisory
• https://ninjarmm.com/blog/cve-2021-26273-cve-2021-26274 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26274 · Security Note
• https://t.me/cvenotify/17305 · Telegram Post
• https://t.me/cvenotify/17306 · Telegram Post