A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user\'s Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user\'s local system.
References
Link | Resource |
---|---|
https://explore.zoom.us/en/trust/security/security-bulletin | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
03 Jan 2022, 22:15
Type | Values Removed | Values Added |
---|---|---|
Summary | A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user\'s Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user\'s local system. |
31 Dec 2021, 00:15
Type | Values Removed | Values Added |
---|---|---|
Summary | A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user's Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user's local system. |
21 Dec 2021, 15:17
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 7.8 |
CWE | NVD-CWE-noinfo | |
CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:keybase:keybase:*:*:*:*:*:*:*:* |
|
References | (MISC) https://explore.zoom.us/en/trust/security/security-bulletin - Third Party Advisory |
14 Dec 2021, 20:32
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-14 20:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-34426
Mitre link : CVE-2021-34426
CVE.ORG link : CVE-2021-34426
JSON object : View
Products Affected
keybase
- keybase
microsoft
- windows
CWE