CVE-2021-33923

Published: Sep 29, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).

Affected (4)

Products: Confluent: Cp Ansible

Confluent

1 product

Cp Ansible

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Confluent Cp Ansible	Version 5.5.0
Confluent Cp Ansible	Version 5.5.1
Confluent Cp Ansible	Version 5.5.2
Confluent Cp Ansible	Version 6.0.0

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (4)

https://confluent.io

Source: cve@mitre.org

Vendor Advisory

https://www.detack.de/en/cve-2021-33923

Source: cve@mitre.org

Third Party Advisory

https://confluent.io

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.detack.de/en/cve-2021-33923

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.