Beveiligingsadvies

CVE-2022-31137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-08 00:00:00

Laatst bijgewerkt 2025-04-22 17:51:19

Toegewezen door GitHub_M

CVSS-score 10.0

Status PUBLISHED

Beschrijving

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Attackers need not be authenticated to exploit this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗