CVE-2019-3704

Summary

VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this vulnerability.

Affected Software

Weaknesses

• OS Command Injection

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/106954
• https://seclists.org/fulldisclosure/2019/Feb/8

References

• http://www.securityfocus.com/bid/106954
• https://seclists.org/fulldisclosure/2019/Feb/8

• ←Previous
• Next→