PT-2021-19433 · Accellion · Accellion Kiteworks

Published 2021-06-23 · Updated 2022-07-12 · CVE-2021-31585

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Accellion Kiteworks versions prior to 7.3.1

Description The issue allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.

Recommendations For versions prior to 7.3.1, update to version 7.3.1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2021-31585

Affected Products

Accellion Kiteworks

References · 4

• 🔥 https://github.com/accellion/CVEs/blob/main/CVE-2021-31585.txt · Exploit
• 🔥 https://github.com/accellion/CVEs · Exploit
• https://osv.dev/vulnerability/CVE-2021-31585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31585 · Security Note