PT-2020-13877
CVE-2020-14072
·
Published
2020-06-29
·
Updated
2021-07-21
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
MK-AUTH version 19.01
Description
An issue in MK-AUTH allows command execution as root via shell metacharacters to /auth admin scripts.
Recommendations
For MK-AUTH version 19.01, consider restricting access to the /auth admin scripts as a temporary workaround until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾