Beveiligingsadvies

CVE-2016-1579

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-22 15:35:59

Laatst bijgewerkt 2024-09-16 16:27:40

Toegewezen door canonical

CVSS-score 6.7

Status PUBLISHED

Beschrijving

UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.

← Alle CVE's bekijken Bekijk op cve.org ↗