An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
References
| Link | Resource |
|---|---|
| https://github.com/fluent/fluentd/issues/2722 | Exploit Issue Tracking |
| https://github.com/fluent/fluentd/issues/2722 | Exploit Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-276 |
21 Nov 2024, 05:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/fluent/fluentd/issues/2722 - Exploit, Issue Tracking |
10 Aug 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password. |
10 Apr 2023, 18:06
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fluentd fluentd-ui
Fluentd fluentd Fluentd |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (MISC) https://github.com/fluent/fluentd/issues/2722 - Exploit, Issue Tracking | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:fluentd:fluentd:1.8.0:-:*:*:*:*:*:* cpe:2.3:a:fluentd:fluentd-ui:1.2.2:*:*:*:*:*:*:* |
04 Apr 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-04 15:15
Updated : 2025-02-13 17:15
NVD link : CVE-2020-21514
Mitre link : CVE-2020-21514
CVE.ORG link : CVE-2020-21514
JSON object : View
Products Affected
fluentd
- fluentd-ui
- fluentd
CWE