PowerShell is vulnerable to code injection. NULL
characters are not properly logged in ScriptBlock
, which would allow an attacker to tamper with the log management and execute unlogged code. The attacker requires access to the affected system and permissions to run a specially crafted application.