CVEvulnerability

CVE-2022-21699

8.8 HIGH Published 2022-01-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-250, CWE-269, CWE-279

Description

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

Affected configurations

• ipython ipython (<= 5.10.0) • ipython ipython (>= 6.0.0 < 7.16.3) • ipython ipython (>= 7.17.0 < 7.31.1) • ipython ipython (>= 8.0.0 < 8.0.1) • debian debian linux 9.0 • debian debian linux 10.0 • debian debian linux 11.0 • fedoraproject fedora 34 • fedoraproject fedora 35

Related

Weakness · CWE (3)

  • CWE-250 Execution with Unnecessary Privileges weakness
  • CWE-269 Improper Privilege Management weakness
  • CWE-279 Incorrect Execution-Assigned Permissions weakness

References