CVE-2021-26274

EUVD-2021-13088
The Agent in NinjaRMM 5.0.909 has Insecure Permissions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
ninjarmmninjarmm
5.0.909
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
https://www.ninjarmm.com
https://www.ninjarmm.com/blog/cve-2021-26273-cve-2021-26274/
https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
https://www.ninjarmm.com
https://www.ninjarmm.com/blog/cve-2021-26273-cve-2021-26274/