Security Advisory

CVE-2020-7980

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-25 18:44:51
Last updated 2024-08-04 09:48:24
Assigner mitre
State PUBLISHED

Description

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.