← CVE Intelligence

CVE-2021-31580

Akkadian Provisioning Manager Engine (PME) Shell Escape via 'exec' command PUBLISHED

Description (CNA)

The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH channel from `shell` to `exec` and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 (and later), Akkadian Provisioning Manager 5.0.2 (and later), and Akkadian Appliance Manager 3.3.0.314-4a349e0 (and later).

Affected (CNA)

Vendor / productVersions
Akkadian / Provisioning Manager Engine (PME)affected 4.50.18 through 4.50.18

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.