未評価
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update com...
CVE-2021-4326
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- web github.com