CVE-2021-31585

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-23 · updated 2026-06-17

Description

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.

Affected products

Kiteworks Email Protection Gateway: before 7.3.1 — fixed in 7.3.1

How to fix

Upgrade to a fixed version: Kiteworks Email Protection Gateway 7.3.1. Check the vendor advisory for mitigations.

References

https://github.com/accellion/CVEs
https://github.com/accellion/CVEs/blob/main/CVE-2021-31585.txt
https://github.com/accellion/CVEs
https://github.com/accellion/CVEs/blob/main/CVE-2021-31585.txt

Get alerted when CVE-2021-31585 or the next vulnerability affects your stack