Command injection

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

command injection

security issue

acuant asureid sentinel

log files

vulnerability

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362.

CPENameOperatorVersion
acuant_asureid_sentinellt5.2.149

CPE	Name	Operator	Version
	acuant_asureid_sentinel	lt	5.2.149

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48228.pdf