Security Advisory
CVE-2024-10776
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer.