PT-2021-21539
CVE-2021-37158
·
تاريخ النشر
2021-11-09
·
تاريخ التحديث
2021-11-12
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
OpenGamePanel OGP-Agent-Linux versions through 2021-08-14
Description
An issue was discovered that allows an authenticated attacker to inject OS commands. This can be achieved by starting a Counter-Strike server and using the map field to enter a Bash command.
Recommendations
For OpenGamePanel OGP-Agent-Linux versions through 2021-08-14, consider restricting access to the map field when starting a Counter-Strike server to minimize the risk of OS command injection until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾