CVE-2019-11364

An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the…

published August 29, 2019

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02230 · 82.6th percentile
Published
2019-08-29T20:03Z
EPSS history
Timeline
  • 29 AUG 20:03Z
    An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the…
    cvelistv5