CVE-2021-42855 Local privilege escalation due to misconfigured write permission on .debug_command.config file
Local attackers can escalate privileges and execute arbitrary commands by modifying the misconfigured .debug_command.config file used by the agent.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-42855?
CVE-2021-42855 is a high-severity vulnerability in Aternity SteelCentral AppInternals Dynamic Sampling Agent, published on 9 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map the corresponding ID to a command to be executed.
Which versions are affected by CVE-2021-42855?
It affects 1 product.
Products include Riverbed Steelcentral Appinternals Dynamic Sampling Agent.
How do I fix CVE-2021-42855?
No fix has been published for CVE-2021-42855 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-42855 being exploited?
There is no known exploitation of CVE-2021-42855 in the wild and no public exploit code.
Other vulnerabilities in Aternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-42786 Remote Code Execution at AgentControllerServlet
- CVE-2021-42854 Directory Traversal Read/Write/Delete at PluginServlet
- CVE-2021-42787 Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet
- CVE-2021-42853 Directory Traversal Delete/Read at AgentDiagnosticServlet
- CVE-2021-42857 Directory Traversal Partial Write at AgentDaServlet
Sources
Also known as GHSA-j285-2pfr-phwh.