PT-2021-11384

CVE-2020-27362

·

Published

2021-07-01

·

Updated

2022-07-12

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Akkadian Provisioning Manager version 4.50.02
Description: An issue exists within the SSH console of Akkadian Provisioning Manager that allows a low-level privileged user to escape the web configuration file editor and escalate privileges.
Recommendations: For Akkadian Provisioning Manager version 4.50.02, consider restricting access to the SSH console until a fix is available. As a temporary workaround, limit the privileges of low-level users to prevent potential escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾