CVE-2021-41394

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/gravitational/teleport/releases/tag/v4.4.11Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v5.2.4Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v6.2.12Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v7.1.1Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v4.4.11Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v5.2.4Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v6.2.12Patch, Third Party Advisory
https://github.com/gravitational/teleport/releases/tag/v7.1.1Patch, Third Party Advisory

Timeline

Published: Sep 18, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-413956.5Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted data CVE-2021-413967.5Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the e CVE-2021-414010.0It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 9 CVE-2021-414028.8flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.CVE-2021-414039.8flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.CVE-2021-414089.8VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.CVE-2021-414119.8drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used corre CVE-2021-414137.8ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.CVE-2021-414156.1Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.CVE-2021-414189.8AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights.CVE-2021-414199.8QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.CVE-2021-41425.5The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the