PT-2019-8878
CVE-2018-12237
·
تاريخ النشر
2019-01-24
·
تاريخ التحديث
2019-02-11
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Symantec Reporter CLI versions 10.1 prior to 10.1.5.6
Symantec Reporter CLI versions 10.2 prior to 10.2.1.8
Description
The issue allows an authenticated malicious administrator with Enable mode access to execute arbitrary OS commands with elevated system privileges due to an OS command injection vulnerability.
Recommendations
For Symantec Reporter CLI versions 10.1 prior to 10.1.5.6, update to version 10.1.5.6 or later.
For Symantec Reporter CLI versions 10.2 prior to 10.2.1.8, update to version 10.2.1.8 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾