CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2021-4326
Severity
LOW
CVSS
3.3
EPSS
0.26%
Original NVD Description
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.
Related CVEs
Other vulnerabilities affecting the same vendor(s)