Beveiligingsadvies

CVE-2025-65074

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-16 12:25:15

Laatst bijgewerkt 2025-12-16 14:38:42

Toegewezen door CERT-PL

CVSS-score 8.6

Status PUBLISHED

Beschrijving

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr script. This issue was fixed in version 6.44.44

← Alle CVE's bekijken Bekijk op cve.org ↗