CVE-2016-2056
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the…
published April 13, 2016
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.
What it is
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.54507 · 99.0th percentile
- Published
- 2016-04-13T16:00Z
EPSS history
Timeline