Beveiligingsadvies

CVE-2022-46478

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-13 00:00:00
Laatst bijgewerkt 2025-04-07 19:04:03
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data.