CVE-2020-11941

Name of the Vulnerable Software and Affected Versions Open-AudIT version 3.2.2

Description An issue was discovered in Open-AudIT, where there is OS Command injection in the Discovery feature. This allows for potential execution of arbitrary system commands.

Recommendations For Open-AudIT version 3.2.2, as a temporary workaround, consider restricting access to the Discovery feature until a patch is available. Avoid using the Discovery feature in sensitive environments to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.