CVE-2021-22935 - Vulnerability Details - OpenCVE

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.04178.

Key SSVC decision points have not yet been added.

Vendors	Products
Ivanti	Connect Secure
Pulsesecure	Pulse Connect Secure

Configuration 1 [-]

OR	cpe:2.3:a:ivanti:connect_secure:9.1:-::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r1.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r10.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r11.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r2.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r3.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r4.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r5.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r6.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r7.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r8.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r9.0::::::
	cpe:2.3:a:pulsesecure:pulse_connect_secure::::::::

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC

History

No history.

MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2021-08-16T18:38:49

Updated: 2024-08-03T18:58:26.102Z

Reserved: 2021-01-06T00:00:00

Link: CVE-2021-22935

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-08-16T19:15:13.537

Modified: 2024-11-21T05:50:58.187

Link: CVE-2021-22935

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Pulse Connect Secure", "vendor": "n/a", "versions": [{"status": "affected", "version": "Fixed in 9.1R12"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "description": "Command Injection - Generic (CWE-77)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-08-16T18:38:49", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "ID": "CVE-2021-22935", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Pulse Connect Secure", "version": {"version_data": [{"version_value": "Fixed in 9.1R12"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Command Injection - Generic (CWE-77)"}]}]}, "references": {"reference_data": [{"name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC", "refsource": "MISC", "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:58:26.102Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}]}]}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2021-22935", "datePublished": "2021-08-16T18:38:49", "dateReserved": "2021-01-06T00:00:00", "dateUpdated": "2024-08-03T18:58:26.102Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "4F450898-0B06-4073-9B76-BF22F68BD14F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r1.0:*:*:*:*:*:*", "matchCriteriaId": "130C8955-BDA4-4518-8EBA-740EB08FC3E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*", "matchCriteriaId": "5AA4B39F-2FB9-4752-B1F1-18812B0990B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*", "matchCriteriaId": "ABD840BF-944E-4F4C-96DC-0256286338F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r2.0:*:*:*:*:*:*", "matchCriteriaId": "4E2D041D-9BDD-416D-B658-1C517C854104", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r3.0:*:*:*:*:*:*", "matchCriteriaId": "7155EB34-E8E0-49AF-BDA2-FB4BFA44662E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.0:*:*:*:*:*:*", "matchCriteriaId": "25EE614A-5F32-4CA9-998A-4FAF16DC100C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r5.0:*:*:*:*:*:*", "matchCriteriaId": "F49EE829-A2CD-491E-BFC3-7888491D7C58", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r6.0:*:*:*:*:*:*", "matchCriteriaId": "2254DDF1-7FF3-49E1-8826-91F49A6794F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r7.0:*:*:*:*:*:*", "matchCriteriaId": "B8EA4DA8-CD09-41AC-ADCB-27CF771C016B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8.0:*:*:*:*:*:*", "matchCriteriaId": "4D6CECCB-18BA-4219-95A2-2525A2BDCE36", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r9.0:*:*:*:*:*:*", "matchCriteriaId": "B7006C07-0E3F-4890-A1B3-533E10924D49", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "matchCriteriaId": "43AF1D62-D827-4495-A4B0-CCA0C2BEE68F", "versionEndExcluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter."}, {"lang": "es", "value": "Una vulnerabilidad en Pulse Connect Secure, versiones anteriores a 9.1R12, podr\u00eda permitir a un administrador autenticado llevar a cabo una inyecci\u00f3n de comandos por medio de un par\u00e1metro web no saneado."}], "id": "CVE-2021-22935", "lastModified": "2024-11-21T05:50:58.187", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-16T19:15:13.537", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "support@hackerone.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}