Critical Vulnerability Information Vulnerability Titles CVE-2021-3568: CLIc: Unprivileged users can modify user or config of the host machine CVE-2021-3569: CLIc: Privilege escalation via HTTP flag CVE-2021-3570: CLIc: Configuration file authorization bypass Affected Versions CLIc <= 1.0.2 CLIc <= 1.0.3 Vulnerability Description CVE-2021-3568: CLIc's electronic package contains multiple vulnerabilities, allowing unprivileged users to modify users or configurations on the host machine regardless of configuration. CVE-2021-3569: CLIc allows privilege escalation via HTTP flag. CVE-2021-3570: CLIc configuration file authorization bypass. Release Date CVE-2021-3568: 2021-09-22 CVE-2021-3569: 2021-09-22 CVE-2021-3570: 2021-09-22 Reference Links GitHub Issue GitHub Pull Request NVD MITRE Acknowledgments Bert Hubert (CCPA) reported these vulnerabilities.