CVE-2021-41583 - vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option

Back Back to CVE browser

MEDIUM

vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option

Published Sep 24, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 1.88%

Description

vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option. This can be leveraged to obtain additional VPN access.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28597
Advisory
https://github.com/eduvpn/vpn-user-portal/releases
Release NotesThird Party Advisory
https://list.surfnet.nl/pipermail/eduvpn-deploy/2021-September/000352.html
x_refsource_MISCMailing ListThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28597		Advisory
https://github.com/eduvpn/vpn-user-portal/releases		Release NotesThird Party Advisory
https://list.surfnet.nl/pipermail/eduvpn-deploy/2021-September/000352.html		x_refsource_MISCMailing ListThird Party Advisory