Lucene search
Veracode Vulnerability DatabaseVERACODE:22459HistoryFeb 05, 2020 - 12:24 a.m.
OS Command Injection
2020-02-0500:24:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.011 Low
EPSS
Percentile
84.8%
network-manager is vulnerable to OS command injection. The vulnerability exists as the unsanitized value of index.process.env.NM_CLI in linux/manager.js, used by getDevices() in linux/manager.js, reaches child_process.execSync() through runCommand().
| CPE | Name | Operator | Version |
|---|---|---|---|
| network-manager | le | 1.0.2 | |
| network-manager | le | 1.0.2 |
References
Related
nvd
nvd
CVE-2019-10786
2020-02-04 21:15:10
osv
osv
Improper Input Validation in network-manager
2021-04-13 15:17:45
cvelist
cvelist
CVE-2019-10786
2020-02-04 20:19:19
cve
cve
CVE-2019-10786
2020-02-04 21:15:10
prion
prion
Design/Logic Flaw
2020-02-04 21:15:00
github
github
Improper Input Validation in network-manager
2021-04-13 15:17:45
ibm
ibm