CVE-2021-29005 - Insecure permission of chmod command on rConfig server 3.9.6 exists

Back Back to CVE browser

HIGH

Insecure permission of chmod command on rConfig server 3.9.6 exists

Published Oct 11, 2021

8.8

HIGH

CVSS 3.1

EPSS 2.15%

Description

Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (1)

https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh
ExploitThird Party Advisory

Link	Providers	Tags
https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 11, 2021

Updated Jul 9, 2026

Reserved Mar 22, 2021

Link CVE-2021-29005

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jul 9, 2026

Link CVE-2021-29005

Red Hat

Severity n/a

Public date n/a

Links CVE-2021-29005