CVE-2013-3632
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the…
High · published September 29, 2014
Patch now
High probability of exploitation
CVSS calls it high at 8.8. It sits in the 99.1th percentile for exploit probability.
What it is
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.57112 · 99.1th percentile
- Published
- 2014-09-29T22:00Z
EPSS history
Timeline