CVE-2021-28271
EUVD-2021-1496027.04.2021, 13:15
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| soyal | 701clientsql | 10.0 ≤ 𝑥 < 10.2 |
| soyal | 701server | 𝑥 ≤ 9.0.2 |
| soyal | 701serversql | 10.0 ≤ 𝑥 < 10.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References