Secure Admin Tool Vulnerability: Configuration Script Execution by Authorized Vault Administrators

Secure Admin Tool Vulnerability: Configuration Script Execution by Authorized Vault Administrators

CVE-2021-41810 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable

Learn more about our Web Application Penetration Testing UK.