# CVEs published 2021-12-12

3 CVEs were published on December 12, 2021: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-44833](https://cve.now/CVE-2021-44833.md): The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file. (no CVSS)
- [CVE-2021-41805](https://cve.now/CVE-2021-41805.md): HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. (no CVSS)
- [CVE-2021-44515](https://cve.now/CVE-2021-44515.md): Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in th (CVSS 9.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.