CVEvulnerability
CVE-2021-44216
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-276
Description
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
Affected configurations
• northern.tech cfengine (< 3.15.5)
• northern.tech cfengine (>= 3.18.0 < 3.18.1)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/ Exploit, Vendor Advisory
- https://northern.tech Vendor Advisory
- https://cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/ Exploit, Vendor Advisory
- https://northern.tech Vendor Advisory