CVE-2015-2746

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before…

published March 26, 2015

CVSS

—

EPSS

25%

Percentile

97.9

In the wild

Unconfirmed

What it is

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.25418 · 97.9th percentile
Published: 2015-03-26T14:00Z

EPSS history

Timeline

26 MAR 14:00Z
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before…
cvelistv5