Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2022-21699

Execution with Unnecessary Privileges

Published: Jan 19, 2022 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-21699
CWEhttps://cwe.mitre.org/data/definitions/250.html

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

Weakness

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Software

NameVendorStart VersionEnd Version
IpythonIpython*5.10.0 (including)
IpythonIpython6.0.0 (including)7.16.3 (excluding)
IpythonIpython7.17.0 (including)7.31.1 (excluding)
IpythonIpython8.0.0 (including)8.0.1 (excluding)
IpythonUbuntubionic*
IpythonUbuntuesm-apps/bionic*
IpythonUbuntuesm-apps/focal*
IpythonUbuntuesm-apps/xenial*
IpythonUbuntuesm-infra-legacy/trusty*
IpythonUbuntufocal*
IpythonUbuntuhirsute*
IpythonUbuntuimpish*
IpythonUbuntutrusty*
IpythonUbuntutrusty/esm*
IpythonUbuntuupstream*
IpythonUbuntuxenial*

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use