CVE ID:
CVE-2021-27104
Vulnerability Name
Accellion FTA OS Command Injection Vulnerability
- Project: Accellion
- Product: FTA
Date:
- Date Added: 2021-11-03
- Due Date: 2021-11-17
Description:
Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
Known To Be Used in Ransomware Campaigns?
Known
Action:
Apply updates per vendor instructions.
Additional Notes:
https://nvd.nist.gov/vuln/detail/CVE-2021-27104
Attention writers! If you've published on Dev.to, read this: We're offering your special Dev.to drop to celebrate our authors' impact in Web3. Click here here (instant distribution). – Admin