VULNERABILITY INTELLIGENCE

CVE-2021-38120

CVSS score5.1 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-08-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

Description

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.

Weakness classification

  • security@opentext.com: CWE-77
  • nvd@nist.gov: CWE-77

Primary references