Skip to content
OpenAdvisories
Unscored CVE-2019-4000 EUVD-2019-13607GHSA-pwwh-9mwx-42h3

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attac…

Published Feb 25, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.

Affected products

VendorProductAffectedFixed
— Druva inSync Mac OS Client 6.5.0 —

References