CVE-2019-4001

Publication date

2020-03-24 21:04:36

Family

tenable

State

PUBLISHED

Description

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.