← voltar
CVE-2019-18909

CVE-2019-18909

EPSS 2.2%
The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges.
Produtos afetados
HP · ThinPro Linux

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://packetstormsecurity.com/files/156907/HP-ThinPro-6.x-7.x-Citrix-Command-Injection.htmlhttp://seclists.org/fulldisclosure/2020/Mar/39https://support.hp.com/us-en/document/c06509350