ZeroHour

CVE-2021-27285

PoC
CVSS 3.1
8.4 high
EPSS
<1%p29
Published
()
Modified
Description

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell.

Vendors
inspur
Products
clusterengine
Weakness
CWE-276
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.