Beveiligingsadvies

CVE-2018-19639

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-03-05 16:00:00
Laatst bijgewerkt 2024-09-16 20:43:12
Toegewezen door microfocus
CVSS-score 6.7
Status PUBLISHED

Beschrijving

If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.