CVE-2020-24032

Name of the Vulnerable Software and Affected Versions XoruX LPAR2RRD and STOR2RRD version 2.70

Description The issue allows for command injection via shell metacharacters in a timezone, using the tz.pl script with the cmd=set&tz=OS command. This can potentially lead to unauthorized execution of system commands.

Recommendations For XoruX LPAR2RRD and STOR2RRD version 2.70, consider restricting access to the tz.pl script until a patch is available. As a temporary workaround, avoid using the cmd=set&tz=OS command in the tz.pl script to minimize the risk of exploitation.