PT-2021-22242 · Tranquil · Tranquil Wapt Enterprise

Anass Annour · Published 2021-08-16 · Updated 2022-07-12 · CVE-2021-38608

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tranquil WAPT Enterprise versions prior to 1.8.2.7373 Tranquil WAPT Enterprise versions prior to 2.0.0.9450

Description The issue allows guest OS users to escalate privileges via WAPT Agent due to incorrect access control.

Recommendations For versions prior to 1.8.2.7373, update to version 1.8.2.7373 or later. For versions prior to 2.0.0.9450, update to version 2.0.0.9450 or later.

Fix

Related Identifiers

CVE-2021-38608

Affected Products

Tranquil Wapt Enterprise

References · 7

• https://osv.dev/vulnerability/CVE-2021-38608 · Vendor Advisory
• https://wapt.fr/fr/doc/wapt-security-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38608 · Security Note
• https://tranquil.it/en/manage-it-equipment/discover-wapt · Vendor Advisory
• https://t.me/cvenotify/19474 · Telegram Post
• https://t.me/cvenotify/19492 · Telegram Post
• https://t.me/cibsecurity/27416 · Telegram Post