Vulnerability-Lookup

CVE-2021-29218 (GCVE-0-2021-29218)

Vulnerability from cvelistv5 – Published: 2022-02-04 22:29 – Updated: 2024-08-03 22:02

Summary

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

local unquoted search path

Assigner

hpe mitre root

References

1 reference

URL	Tags
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
n/a	HPE Agentless Management	Affected: Prior to 1.44.0.0, 10.96.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:02:51.140Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HPE Agentless Management",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to 1.44.0.0, 10.96.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "local unquoted search path",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-04T22:29:15.000Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "ID": "CVE-2021-29218",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "HPE Agentless Management",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Prior to 1.44.0.0, 10.96.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "local unquoted search path"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us",
              "refsource": "MISC",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2021-29218",
    "datePublished": "2022-02-04T22:29:15.000Z",
    "dateReserved": "2021-03-25T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:02:51.140Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-29218",
      "date": "2026-09-16",
      "epss": "0.00237",
      "percentile": "0.14894"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hpe:agentless_management:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.44.0.0\", \"matchCriteriaId\": \"F51AF901-3141-438F-AFA6-2BB6A1517D96\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"82132539-3C34-4B63-BE2A-F51077D8BC5A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hpe:proliant_agentless_management:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.96.0.0\", \"matchCriteriaId\": \"D67AC01D-71F2-4814-BFA2-28DD526A4A6E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:apollo_20:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CCF1FAB2-B69D-403F-9CE3-1F08000168ED\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:apollo_2000_gen_10_plus:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C3696F8B-6433-4E1E-83F1-0F385F7AE819\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:apollo_6500:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE45FAEB-6FFB-418F-BD19-C8859B92B399\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"970779A7-00C5-4A06-89B1-717418934EAA\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:apollo_80:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB96A78D-9DEE-4156-B6B0-3C64BBA2A7AA\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:proliant_dl:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00820B28-509B-4D6E-8F7F-FC793198FA5F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:proliant_ml:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B7DAFFA-24F6-4E3E-9152-668029351953\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:synergy_480_gen9:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86B14DA3-004D-423F-ACF6-CA8045D20DB6\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:synergy_620_gen9:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B597367-C014-40FD-9BBB-CBE6A6D164EE\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:synergy_660_gen9:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"81F08AE0-095E-4A0B-BE4E-5BF1CFAA1920\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:hpe:synergy_680_gen9:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"467A5F6C-5E1E-443E-9D11-8F2F094BAA2E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad de seguridad en la ruta de b\\u00fasqueda local no citada en  HPE Agentless Management Service para Windows versiones: Anteriores a 1.44.0.0, 10.96.0.0. Esta vulnerabilidad podr\\u00eda ser explotada localmente por un usuario con altos privilegios para ejecutar malware que puede conllevar a una p\\u00e9rdida de confidencialidad, integridad y disponibilidad. HPE ha proporcionado actualizaciones de software para resolver la vulnerabilidad en HPE Agentless Management Service para Windows\"}]",
      "id": "CVE-2021-29218",
      "lastModified": "2024-11-21T06:00:50.883",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 6.7, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2022-02-04T23:15:11.407",
      "references": "[{\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us\", \"source\": \"security-alert@hpe.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "security-alert@hpe.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-428\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-29218\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2022-02-04T23:15:11.407\",\"lastModified\":\"2024-11-21T06:00:50.883\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad de seguridad en la ruta de b\u00fasqueda local no citada en  HPE Agentless Management Service para Windows versiones: Anteriores a 1.44.0.0, 10.96.0.0. Esta vulnerabilidad podr\u00eda ser explotada localmente por un usuario con altos privilegios para ejecutar malware que puede conllevar a una p\u00e9rdida de confidencialidad, integridad y disponibilidad. HPE ha proporcionado actualizaciones de software para resolver la vulnerabilidad en HPE Agentless Management Service para Windows\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-428\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hpe:agentless_management:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.44.0.0\",\"matchCriteriaId\":\"F51AF901-3141-438F-AFA6-2BB6A1517D96\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"82132539-3C34-4B63-BE2A-F51077D8BC5A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hpe:proliant_agentless_management:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.96.0.0\",\"matchCriteriaId\":\"D67AC01D-71F2-4814-BFA2-28DD526A4A6E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:apollo_20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCF1FAB2-B69D-403F-9CE3-1F08000168ED\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:apollo_2000_gen_10_plus:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3696F8B-6433-4E1E-83F1-0F385F7AE819\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:apollo_6500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE45FAEB-6FFB-418F-BD19-C8859B92B399\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"970779A7-00C5-4A06-89B1-717418934EAA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:apollo_80:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB96A78D-9DEE-4156-B6B0-3C64BBA2A7AA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:proliant_dl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00820B28-509B-4D6E-8F7F-FC793198FA5F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:proliant_ml:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B7DAFFA-24F6-4E3E-9152-668029351953\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:synergy_480_gen9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86B14DA3-004D-423F-ACF6-CA8045D20DB6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:synergy_620_gen9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B597367-C014-40FD-9BBB-CBE6A6D164EE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:synergy_660_gen9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F08AE0-095E-4A0B-BE4E-5BF1CFAA1920\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hpe:synergy_680_gen9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"467A5F6C-5E1E-443E-9D11-8F2F094BAA2E\"}]}]}],\"references\":[{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us\",\"source\":\"security-alert@hpe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-03-27T14:18:56+00:00",
      "cve": "CVE-2021-29218",
      "id": "CVE-2021-29218",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2021-29218",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-29218.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2021-29218

Vulnerability from fkie_nvd - Published: 2022-02-04 23:15 - Updated: 2026-06-17 03:47

Severity

6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security-alert@hpe.com	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04233en_us	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04233en_us	Vendor Advisory

Impacted products

Vendor	Product	Version
hpe	agentless_management	*
microsoft	windows	-
hpe	proliant_agentless_management	*
hpe	apollo_20	-
hpe	apollo_2000_gen_10_plus	-
hpe	apollo_6500	-
hpe	apollo_6500_gen10_plus	-
hpe	apollo_80	-
hpe	proliant_dl	-
hpe	proliant_ml	-
hpe	synergy_480_gen9	-
hpe	synergy_620_gen9	-
hpe	synergy_660_gen9	-
hpe	synergy_680_gen9	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "HPE Agentless Management",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to 1.44.0.0, 10.96.0.0"
            }
          ]
        }
      ],
      "source": "security-alert@hpe.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hpe:agentless_management:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F51AF901-3141-438F-AFA6-2BB6A1517D96",
              "versionEndExcluding": "1.44.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*",
              "matchCriteriaId": "82132539-3C34-4B63-BE2A-F51077D8BC5A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hpe:proliant_agentless_management:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D67AC01D-71F2-4814-BFA2-28DD526A4A6E",
              "versionEndExcluding": "10.96.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hpe:apollo_20:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCF1FAB2-B69D-403F-9CE3-1F08000168ED",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:apollo_2000_gen_10_plus:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3696F8B-6433-4E1E-83F1-0F385F7AE819",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:apollo_6500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE45FAEB-6FFB-418F-BD19-C8859B92B399",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "970779A7-00C5-4A06-89B1-717418934EAA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:apollo_80:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB96A78D-9DEE-4156-B6B0-3C64BBA2A7AA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:proliant_dl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00820B28-509B-4D6E-8F7F-FC793198FA5F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:proliant_ml:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B7DAFFA-24F6-4E3E-9152-668029351953",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:synergy_480_gen9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "86B14DA3-004D-423F-ACF6-CA8045D20DB6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:synergy_620_gen9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B597367-C014-40FD-9BBB-CBE6A6D164EE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:synergy_660_gen9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "81F08AE0-095E-4A0B-BE4E-5BF1CFAA1920",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hpe:synergy_680_gen9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "467A5F6C-5E1E-443E-9D11-8F2F094BAA2E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de seguridad en la ruta de b\u00fasqueda local no citada en  HPE Agentless Management Service para Windows versiones: Anteriores a 1.44.0.0, 10.96.0.0. Esta vulnerabilidad podr\u00eda ser explotada localmente por un usuario con altos privilegios para ejecutar malware que puede conllevar a una p\u00e9rdida de confidencialidad, integridad y disponibilidad. HPE ha proporcionado actualizaciones de software para resolver la vulnerabilidad en HPE Agentless Management Service para Windows"
    }
  ],
  "id": "CVE-2021-29218",
  "lastModified": "2026-06-17T03:47:25.180",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-02-04T23:15:11.407",
  "references": [
    {
      "source": "security-alert@hpe.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-428"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-P267-5W4M-PPRH

Vulnerability from github – Published: 2022-02-10 00:00 – Updated: 2022-02-10 00:00

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2021-29218"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-428"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-02-04T23:15:00Z",
    "severity": "MODERATE"
  },
  "details": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.",
  "id": "GHSA-p267-5w4m-pprh",
  "modified": "2022-02-10T00:00:42Z",
  "published": "2022-02-10T00:00:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29218"
    },
    {
      "type": "WEB",
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2021-29218

Vulnerability from gsd - Updated: 2023-12-13 01:23

Details

Aliases

CVE-2021-29218

Aliases

CVE-2021-29218

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2021-29218",
    "description": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.",
    "id": "GSD-2021-29218"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-29218"
      ],
      "details": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.",
      "id": "GSD-2021-29218",
      "modified": "2023-12-13T01:23:36.474804Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-alert@hpe.com",
        "ID": "CVE-2021-29218",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "HPE Agentless Management",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Prior to 1.44.0.0, 10.96.0.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "local unquoted search path"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us",
            "refsource": "MISC",
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:hpe:agentless_management:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "1.44.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:hpe:proliant_agentless_management:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "10.96.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:apollo_20:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:apollo_2000_gen_10_plus:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:apollo_6500:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:apollo_80:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:proliant_dl:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:proliant_ml:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:synergy_480_gen9:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:synergy_620_gen9:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:synergy_660_gen9:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hpe:synergy_680_gen9:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "ID": "CVE-2021-29218"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-428"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04233en_us"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-02-09T16:51Z",
      "publishedDate": "2022-02-04T23:15Z"
    }
  }
}

JVNDB-2022-000011

Vulnerability from jvndb - Published: 2022-02-09 06:49 - Updated:2022-02-09 06:49

Severity

8.2 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

HPE Agentless Management registers unquoted service paths

Details

HP Agentless Management provided by Hewlett Packard Enterprise registers some Windows services with unquoted file paths (CWE-428). Daisuke Ota of PwC Consulting LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN12969207/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2021-29218
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-29218
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Hewlett Packard Enterprise Co.	HPE Agentless Management Service
	Hewlett Packard Enterprise Co.	HPE ProLiant Agentless Management Service

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000011.html",
  "dc:date": "2022-02-09T15:49+09:00",
  "dcterms:issued": "2022-02-09T15:49+09:00",
  "dcterms:modified": "2022-02-09T15:49+09:00",
  "description": "HP Agentless Management provided by Hewlett Packard Enterprise registers some Windows services with unquoted file paths (CWE-428).\r\n\r\nDaisuke Ota of PwC Consulting LLC reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000011.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hp:agentless_management",
      "@product": "HPE Agentless Management Service",
      "@vendor": "Hewlett Packard Enterprise Co.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hp:proliant_agentless_management",
      "@product": "HPE ProLiant Agentless Management Service",
      "@vendor": "Hewlett Packard Enterprise Co.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
      "@version": "2.0"
    },
    {
      "@score": "8.2",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000011",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN12969207/index.html",
      "@id": "JVN#12969207",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2021-29218",
      "@id": "CVE-2021-29218",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-29218",
      "@id": "CVE-2021-29218",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "HPE Agentless Management registers unquoted service paths"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2021-29218 (GCVE-0-2021-29218)

FKIE_CVE-2021-29218

GHSA-P267-5W4M-PPRH

GSD-2021-29218

JVNDB-2022-000011

Tags

Sightings

Nomenclature

Related by attack behaviour