CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41617

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.2%

CVSS Severity

CVSS v3 Score 7.0

CVSS v2 Score 4.4

References

Products affected by CVE-2021-41617

Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » Clustered Data Ontap » Version: N/A

cpe:2.3:a:netapp:clustered_data_ontap:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Ontap Select Deploy Administration Utility » Version: N/A

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Openbsd » Openssh » Version: 6.2

cpe:2.3:a:openbsd:openssh:6.2
Openbsd » Openssh » Version: 6.3

cpe:2.3:a:openbsd:openssh:6.3
Openbsd » Openssh » Version: 6.4

cpe:2.3:a:openbsd:openssh:6.4
Openbsd » Openssh » Version: 6.5

cpe:2.3:a:openbsd:openssh:6.5
Openbsd » Openssh » Version: 6.6

cpe:2.3:a:openbsd:openssh:6.6
Openbsd » Openssh » Version: 6.7

cpe:2.3:a:openbsd:openssh:6.7
Openbsd » Openssh » Version: 6.8

cpe:2.3:a:openbsd:openssh:6.8
Openbsd » Openssh » Version: 6.9

cpe:2.3:a:openbsd:openssh:6.9
Openbsd » Openssh » Version: 7.0

cpe:2.3:a:openbsd:openssh:7.0
Openbsd » Openssh » Version: 7.1

cpe:2.3:a:openbsd:openssh:7.1
Openbsd » Openssh » Version: 7.2

cpe:2.3:a:openbsd:openssh:7.2
Openbsd » Openssh » Version: 7.3

cpe:2.3:a:openbsd:openssh:7.3
Openbsd » Openssh » Version: 7.4

cpe:2.3:a:openbsd:openssh:7.4
Openbsd » Openssh » Version: 7.5

cpe:2.3:a:openbsd:openssh:7.5
Openbsd » Openssh » Version: 7.6

cpe:2.3:a:openbsd:openssh:7.6
Openbsd » Openssh » Version: 7.7

cpe:2.3:a:openbsd:openssh:7.7
Openbsd » Openssh » Version: 7.8

cpe:2.3:a:openbsd:openssh:7.8
Openbsd » Openssh » Version: 7.9

cpe:2.3:a:openbsd:openssh:7.9
Openbsd » Openssh » Version: 8.0

cpe:2.3:a:openbsd:openssh:8.0
Openbsd » Openssh » Version: 8.1

cpe:2.3:a:openbsd:openssh:8.1
Openbsd » Openssh » Version: 8.2

cpe:2.3:a:openbsd:openssh:8.2
Openbsd » Openssh » Version: 8.3

cpe:2.3:a:openbsd:openssh:8.3
Openbsd » Openssh » Version: 8.4

cpe:2.3:a:openbsd:openssh:8.4
Openbsd » Openssh » Version: 8.5

cpe:2.3:a:openbsd:openssh:8.5
Openbsd » Openssh » Version: 8.6

cpe:2.3:a:openbsd:openssh:8.6
Openbsd » Openssh » Version: 8.7

cpe:2.3:a:openbsd:openssh:8.7
Oracle » Http Server » Version: 12.2.1.2.0

cpe:2.3:a:oracle:http_server:12.2.1.2.0
Oracle » Http Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:http_server:12.2.1.3.0
Oracle » Http Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:http_server:12.2.1.4.0
Oracle » Zfs Storage Appliance Kit » Version: 8.8

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8
Starwindsoftware » Starwind Virtual San » Version: v8r13

cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8r13
Netapp » Aff 500f » Version: N/A

cpe:2.3:h:netapp:aff_500f:-
Netapp » Aff A250 » Version: N/A

cpe:2.3:h:netapp:aff_a250:-
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Netapp » Aff 500f Firmware » Version: N/A

cpe:2.3:o:netapp:aff_500f_firmware:-
Netapp » Aff A250 Firmware » Version: N/A

cpe:2.3:o:netapp:aff_a250_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41617

Products

Pricing

Contact Us