CVE-2021-34426medium

CVE-2021-34426: falha de média gravidade em Zoom Video Communications Inc Keybase Client…

Arbitrary command execution in Keybase Client for Windows

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Keybase Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user\'s Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user\'s local system.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
Zoom Video Communications Inc · Keybase Client for Windows
CVEs relacionadas — Zoom Video Communications Inc Keybase Client…

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34422HIGHPath traversal of file names in Keybase Client for WindowsEPSS 1.4%CVE-2022-22779LOWRetained exploded messages in Keybase clients for macOS and WindowsEPSS 0.8%