CVE-2021-42562: Mitre Caldera

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components that should only be accessible by admin users.

Affected products

• Mitre Caldera: up to and including 2.8.1

Published 2022-01-12. Last modified 2026-06-17.