Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7798
HistoryNov 15, 2018 - 6:42 a.m.

Code Injection

2018-11-1506:42:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21

EPSS

0.001

Percentile

35.9%

PowerShell is vulnerable to code injection. NULL characters are not properly logged in ScriptBlock, which would allow an attacker to tamper with the log management and execute unlogged code. The attacker requires access to the affected system and permissions to run a specially crafted application.