CVE:CVE-2021-32756
CNNVD:CNNVD-202107-1648
ManageIQ MiqExpression是一个功能模块。
ManageIQ MiqExpression 模块在jansa-4、kasparov-2和lasker-1之前的版本中存在代码注入漏洞，攻击者可利用该漏洞使用根权限在主机系统上执行任意代码。
solution:Upgrade manageiq manageiq to a higher version than jansa-1,jansa-1:alpha1,jansa-1:beta1,jansa-1:rc1,jansa-1:rc2,jansa-2,jansa-3,kasparov-1,kasparov-1:alpha1,kasparov-1:beta1,kasparov-1:beta1.1,lasker-1:beta1,and avoid the version jansa-1,jansa-1:alpha1,jansa-1:beta1,jansa-1:rc1,jansa-1:rc2,jansa-2,jansa-3,kasparov-1,kasparov-1:alpha1,kasparov-1:beta1,kasparov-1:beta1.1,lasker-1:beta1