Lucene search
HistoryApr 15, 2024 - 2:15 p.m.
CVE-2024-3781
command injection
cve-2024-3781
operating system
active directory integration
wbsairback 21.02.04
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0
Percentile
9.6%
Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows the intended command to be modified when sent to a downstream component in WBSAirback 21.02.04.
Related
cve
cve
CVE-2024-3781
2024-04-15 14:15:08
vulnrichment
vulnrichment
CVE-2024-3781 OS Command Injection vulnerability in WBSAirback
2024-04-15 14:03:05
cvelist
cvelist
CVE-2024-3781 OS Command Injection vulnerability in WBSAirback
2024-04-15 14:03:05
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-3781