CVE-2019-11364

2019-08-2920:03:06

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

57.0%

JSON

An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.

References

prophecyinternational.atlassian.net/wiki/spaces/SC7/pages/158760961/Release+Notes+for+Snare+Central+v7.4.5