Security Advisory

CVE-2021-36667

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-11 15:06:50

Last updated 2026-07-09 00:14:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library.

← Browse all CVEs View on cve.org ↗