VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 11, 2022· Updated Aug 3, 2024

CVE-2021-33658

CVE-2021-33658

Description

atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.

Affected products

2
  • Openeuler/atunellm-create2 versions
    <0.3-0.8+ 1 more
    • (no CPE)range: <0.3-0.8
    • (no CPE)range: 0.3-0.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.