Paper/Archive/CVE-2021-33191

CVE-2021-33191

Apache Software Foundation Apache NiFi - MiNiFi C++ — MiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocol

EPSS 4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 90.6.906 × 2018.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command is then executed using the same privileges as the application binary. This was addressed in version 0.10.0

Affected

ProductAffectedFixed inSource

Apache NiFi - MiNiFi C++0.5.0 – < Apache NiFi - MiNiFi C++*Apache NiFi - MiNiFi C++*CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refopenwall.com/lists/oss-security/2021/08/24/1 refopenwall.com/lists/oss-security/2021/08/24/1 reflists.apache.org/thread.html/r6f27a2454f5f67dbe4e21c8eb1db537b01863a0bc3758f28aa60f032%40%3Cannounce.apache.org%3E