Security Advisory

CVE-2021-40084

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-25 00:21:25

Last updated 2024-08-04 02:27:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted GECOS field whereas systemd-sysusers (a program with the same specification) does not do that.

← Browse all CVEs View on cve.org ↗