CVE-2021-40612
published 2021-12-22CVE-2021-40612: An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.01%
78.4th percentile
An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| opmantek | open-audit | >= 3.5.0 < 4.3.0 | 4.3.0 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://community.opmantek.com/pages/viewpage.action?pageId=65504438https://github.com/Opmantek/open-audit/commit/c7595cbb092e410a487f03c0eb536cf19e538860https://community.opmantek.com/pages/viewpage.action?pageId=65504438https://github.com/Opmantek/open-audit/commit/c7595cbb092e410a487f03c0eb536cf19e538860
2021-12-22
Published