CVE-2018-16144

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 33%

probabilidade de exploração

33%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password parameter.

Produtos afetados

n/a · n/a

Referências

https://knowledge.opsview.com/v5.3/docs/whats-new https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities