CVE-2021-44216: Medium severity gnu cfengine vulnerability
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44216?
CVE-2021-44216 is a vulnerability in Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 that has insecure permissions, allowing unauthorized local users to access Apache and Mission Portal log files.
How severe is CVE-2021-44216?
CVE-2021-44216 has a severity level of 5.5 (Medium).
How can unauthorized local users exploit CVE-2021-44216?
Unauthorized local users can exploit CVE-2021-44216 by gaining access to the Apache and Mission Portal log files due to insecure permissions.
Which versions of Northern.tech CFEngine Enterprise are affected by CVE-2021-44216?
Northern.tech CFEngine Enterprise versions before 3.15.5 and 3.18.x before 3.18.1 are affected by CVE-2021-44216.
Are there any fixes or patches available for CVE-2021-44216?
Yes, Northern.tech has released CFEngine Enterprise versions 3.15.5 and 3.18.1 to address the insecure permissions vulnerability in CVE-2021-44216.