PT-2019-12073
CVE-2019-10880
·
تاريخ النشر
2019-04-12
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
XEROX products (affected versions not specified)
Description
A remote command execution issue exists, allowing an attacker to execute commands on the Linux system as the
nobody user through a crafted HTTP request. This is due to an OS Command Injection vulnerability in the HTTP interface. Depending on the configuration, authentication may not be required to exploit this issue.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾