CVE-2021-36231

概要

参考情報

• syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-035.txt · Exploit

mik.starlight のその他の脆弱性

• CVE-2021-36234中 5.5Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.
• CVE-2021-36233中 6.5The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary …
• CVE-2021-36232高 8.8Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.