Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21957 EUVD-2021-9128GHSA-vjjq-q5v7-9wmx

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A special…

Published Dec 8, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Dream Report Dream Report ODS Remote Connector 20.2.16900.0 —

References