CVE-2021-42370

概要

参考情報

• orangecertcc/security-research security advisory · Third Party Advisory
• lpar2rrd.com/note730.php · Release Notes
• stor2rrd.com/note730.php · Release Notes

lpar2rrd のその他の脆弱性

• CVE-2025-54769高 8.8An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their…
• CVE-2025-54768中 5.3An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web applic…
• CVE-2025-54767中 6.5An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user.
• CVE-2021-42372高 8.8A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers t…
• CVE-2021-42371緊急 9.8lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.