CRITICAL🇬🇧 English

CVE-2020-10789

CVSS 9.8v3.1pub. 2020-03-25upd. 2024-11-21

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • It Novum Openitcockpit

    APP
    It-Novum
    < 3.7.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2020-10788CRITICAL9.1ten sam produkt

openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than generating a ...

CVE-2019-15494CRITICAL9.8ten sam produkt

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.

CVE-2019-15490CRITICAL9.8ten sam produkt

openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.

CVE-2026-24893HIGH8.8ten sam produkt

openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Communit...

CVE-2026-24891HIGH7.5ten sam produkt

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and...