Description
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.
References
- http://www.portcullis-security.com/339.php
- 38538 third-party-advisory