CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandle...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory openitcockpit.io
patch github.com