PT-2023-16237 · Unknown · Ldap Agent Update Service
CVE-2023-0392
·
Publicado
2023-11-08
·
Atualizado
2024-09-04
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LDAP Agent Update service versions prior to 5.18
Description
The issue concerns the use of an unquoted path in the LDAP Agent Update service, which could potentially allow arbitrary code execution.
Recommendations
For versions prior to 5.18, update to version 5.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ldap Agent Update Service