PT-2021-23853 · Unknown · Servermanagement

Ghost · Published 2021-11-12 · Updated 2021-11-16 · CVE-2021-43493

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56

Description The issue is a directory traversal vulnerability that can be used to extract credentials, which can then be used to execute code.

Recommendations For the affected ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-43493

Affected Products

Servermanagement

References · 5

• 🔥 https://github.com/cksgf/ServerManagement/issues/21 · Exploit
• https://osv.dev/vulnerability/CVE-2021-43493 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43493 · Security Note
• https://t.me/cibsecurity/32309 · Telegram Post
• https://t.me/cvenotify/23344 · Telegram Post