Beveiligingsadvies

CVE-2024-11220

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-06 17:45:51

Laatst bijgewerkt 2024-12-06 20:43:08

Toegewezen door icscert

CVSS-score 8.5

Status PUBLISHED

Beschrijving

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation.

← Alle CVE's bekijken Bekijk op cve.org ↗