Description
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php.
Unscored
CVE-2020-10789
EUVD-2020-3202GHSA-mv89-3mqj-vq9h
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that ar…
Published Mar 25, 2020 · Updated Aug 4, 2024 · Assigned by mitre