vulnerability
Oracle Solaris 11: CVE-2021-22921 (11.4 SRU 38.101.6)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Jul 12, 2021 | Nov 17, 2021 | Jan 28, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 12, 2021
Added
Nov 17, 2021
Modified
Jan 28, 2025
Description
Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking.
Solution(s)
oracle-solaris-11-4-upgrade-runtime-nodejs-14-17-6-11-4-38-0-1-101-2oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-12-12-22-5-11-4-38-0-1-101-2oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-14-14-17-6-11-4-38-0-1-101-2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.