CVE Details for CVE: CVE-2021-1626
Summary
MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Versions affected: Mule 4.1.x and 4.2.x runtime released before February 2, 2021.
| Timestamps | |
|---|---|
| Last major update | 01-04-2021 - 14:48 |
| Published | 26-03-2021 - 17:15 |
| Last modified | 01-04-2021 - 14:48 |
Vulnerable Configurations
-
cpe:2.3:a:salesforce:mule:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.0:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.2:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.3:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.4:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.5:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.1.6:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.1.6:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.2.2:-:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.2.2:-:*:*:*:*:*:*
-
cpe:2.3:a:salesforce:mule:4.2.2:rc1:*:*:*:*:*:*
cpe:2.3:a:salesforce:mule:4.2.2:rc1:*:*:*:*:*:*
CWE
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | PARTIAL | PARTIAL |
CVSS3
Base
9.8
Impact
5.9
Exploitability
3.9
Access
| Attack Complexity | Attack vector | Privileges Required | Scope | User Interaction |
|---|---|---|---|---|
| LOW | NETWORK | NONE | UNCHANGED | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| HIGH | HIGH | HIGH |