CVE-2021-28271

HOCH 8.8CVE-2021-28271 · Published 27/04/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-28271 ist eine Schwachstelle (HOCH (CVSS 8.8)) in 701clientsql (soyal), 701server (soyal), 701serversql (soyal).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 79.4% aller Schwachstellen.
Abhilfe: auf 10.2 oder neuer aktualisieren.

Package	Affected versions	Patched versions
701clientsql soyal	`≥ 10.0, < 10.2`	`10.2`
701server soyal	`≤ 9.0.2`	No fix yet
701serversql soyal	`≥ 10.0, < 10.2`	`10.2`

Description

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.

References

exploit-db.com/exploits/49678 · Exploit
zeroscience.mk/en/vulnerabilities · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free