PT-2021-17834 · Ca · Ca Ehealth Performance Manager

Published 2021-03-26 · Updated 2024-08-03 · CVE-2021-28249

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: CA eHealth Performance Manager versions 6.3.2.12 and earlier

Description: The issue allows for privilege escalation via a dynamically linked shared object library. To exploit this, the ehealth user must create a malicious library in the writable RPATH, which will be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. This issue only affects products that are no longer supported by the maintainer.

Recommendations: For CA eHealth Performance Manager versions 6.3.2.12 and earlier, consider disabling the FtpCollector executable until a resolution can be determined, as these versions are no longer supported by the maintainer. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2021-28249

Affected Products

Ca Ehealth Performance Manager

References · 5

• 🔥 https://n4nj0.github.io/advisories/ca-ehealth-performance-manager · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-28249 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28249 · Vendor Advisory
• https://t.me/cvenotify/12012 · Telegram Post
• https://t.me/cvenotify/12038 · Telegram Post