Beveiligingsadvies

CVE-2018-11139

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-05-31 18:00:00

Laatst bijgewerkt 2024-08-05 08:01:51

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TEST_SERVER' sent to the script via the POST method.

← Alle CVE's bekijken Bekijk op cve.org ↗