CVE-2021-28246: High severity broadcom ehealth vulnerability
UNSUPPORTED WHEN ASSIGNED CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28246?
CVE-2021-28246 is classified as a privilege escalation vulnerability.
How do I fix CVE-2021-28246?
To remediate CVE-2021-28246, restrict write access to the RPATH or upgrade to a patched version of CA eHealth Performance Manager.
Who is affected by CVE-2021-28246?
CVE-2021-28246 affects users of CA eHealth Performance Manager version 6.3.2.12 and earlier.
What kind of attack can exploit CVE-2021-28246?
An attacker can exploit CVE-2021-28246 by creating a malicious dynamically linked shared object library.
What should I do if I cannot patch CVE-2021-28246?
If patching is not an option, consider implementing strict access controls to mitigate the risk associated with CVE-2021-28246.