Security Advisory

CVE-2011-2397

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-12-05 11:00:00
Last updated 2024-08-06 23:00:33
Assigner mitre
State PUBLISHED

Description

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.