CVE-2021-34539

{"id": "CVE-2021-34539", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2021-06-10T11:15:09.393", "references": [{"url": "https://github.com/CubeCoders/AMP/issues/464", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/CubeCoders/AMP/issues/464", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-668"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged users can trigger code execution."}, {"lang": "es", "value": "Se ha detectado un problema en CubeCoders AMP versiones anteriores a 2.1.1.8. Una falta de comprobaci\u00f3n de la configuraci\u00f3n de la versi\u00f3n de Java significa que se puede establecer una ruta ejecutable no deseada. El resultado es que los usuarios con altos privilegios pueden desencadenar la ejecuci\u00f3n de c\u00f3digo"}], "lastModified": "2024-11-21T06:10:37.973", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cubecoders:amp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FF53C78-7246-4215-B2EA-87550733B894", "versionEndExcluding": "2.1.1.8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}