CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell.

CVSS v3.1

8.4 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.35% chance of exploitation in the next 30 days, 28th percentile

Published

2025-01-06

Updated

2025-01-07

Proof-of-concept exploits (1)

• fjh1997/CVE-2021-272850★ · 2025-01-07

References

• CVE Record
• NVD entry

Related

• CVE-2021-27250
• CVE-2021-27289
• CVE-2021-27249
• CVE-2021-27290
• CVE-2021-27246
• CVE-2021-27308