CVE-2021-33658

Name of the Vulnerable Software and Affected Versions atune versions prior to 0.3-0.8

Description The issue allows an attacker to escalate local privileges or modify any file by accessing the local atune URL interface. This can be achieved by logging in as a local user and running a curl command. The default configuration does not forcibly enable authentication.

Recommendations For atune versions prior to 0.3-0.8, consider disabling access to the local atune URL interface until a patch is available. Restrict local user privileges to minimize the risk of exploitation.