A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.
References
Link | Resource |
---|---|
https://github.com/zowe/imperative/ | Product |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:21
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-noinfo |
Information
Published : 2023-03-01 08:15
Updated : 2024-02-28 19:51
NVD link : CVE-2021-4326
Mitre link : CVE-2021-4326
CVE.ORG link : CVE-2021-4326
JSON object : View
Products Affected
linuxfoundation
- zowe
CWE