CVE-2016-6270

The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote…

published January 30, 2017

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the password to api/v1/cfg/oauth/save_identify_pfx/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06143 · 93.4th percentile
Published
2017-01-30T22:00Z
EPSS history
Timeline
  • 30 JAN 22:00Z
    The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote…
    cvelistv5