Security Advisory
CVE-2019-10880
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.