CVE-2021-43269

ALTO 8.8CVE-2021-43269 · Published 20/01/2022 · updated 17/06/2026

En resumen

CVE-2021-43269 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a code42 (code42).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 71.3% de las vulnerabilidades.
Solución: actualizar a 8.8.0 o posterior.

Package	Affected versions	Patched versions
code42 code42	`< 8.8.0`	`8.8.0`

Description

In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config (PAC) file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. (Incydr Professional and Enterprise are unaffected.)

References

support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Arbitrary_code_execution_via_malicious_Code42_app_proxy_configuration · Vendor Advisory
code42.com/r/support/CVE-2021-43269 · Vendor Advisory

Más vulnerabilidades de code42

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

code42

< 8.8.0

8.8.0

Description

Más vulnerabilidades de code42

Ver todo →