Arbitrary Command Execution in DSA Keypasswd Parameter of a Security Application from a Major Vendor

CVE-2021-21874

What is CVE-2021-21874?

A vulnerability exists in a popular security application that allows an attacker to execute arbitrary commands through specially-crafted HTTP requests. The issue specifically arises in the handling of the DSA keypasswd parameter, enabling remote execution of unauthorized commands upon authenticated access. This flaw underscores the need for immediate security assessments and stringent input validation measures.

References