CVE-2021-38120 — Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication

CVE-2021-38120

Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication PUBLISHED

Description (CNA)

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.

Affected (CNA)

Vendor / product	Versions
OpenText / NetIQ Advance Authentication	affected 6.3.5.1 before <

CWE

CWE-77

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.