Security Advisory

CVE-2020-27887

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-29 18:26:48

Last updated 2024-08-04 16:25:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php.

← Browse all CVEs View on cve.org ↗