Medium severity5.5NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026

CVE-2021-44216

Description

Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Northern.tech/Cfengine
cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*
Range: <3.15.5
Northern.tech/CFEngine Enterprisecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.15.5, <3.18.1
osv-coords3 versions
pkg:rpm/suse/cfengine&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012 pkg:rpm/suse/cfengine&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/cfengine-masterfiles&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012
< 3.21.0-17.3.1+ 2 more
- (no CPE)range: < 3.21.0-17.3.1
- (no CPE)range: < 3.21.0-17.3.1
- (no CPE)range: < 3.21.0-10.3.1

Patches

Vulnerability mechanics

References

cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/nvdExploitVendor Advisory
northern.technvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000