CVE-2019-10880

2019-04-12T18:29:00
ID CVE-2019-10880
Type cve
Reporter cve@mitre.org
Modified 2019-04-18T16:57:00

Description

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.