CVE-2021-30358
Mobile Access Portal Native Applications who's path is defined by the administrator with...
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
- Record
CVE-2021-30358- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
- Record
CVE-2021-30358- Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2021-17289 No score
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
- Record
EUVD-2021-17289- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-774j-rp75-7xqv No score
Mobile Access Portal Native Applications who's path is defined by the administrator with...
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
- Record
GHSA-774j-rp75-7xqv- Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30358 is a high vulnerability (CVSS 7.2) in Checkpoint Mobile Access Portal Agent, published October 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.5%, the 98th percentile. No source names a fixed version.