Design/Logic Flaw

2014-05-2014:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.

CPENameOperatorVersion
x2go_servereq4.0.1.6
x2go_servereq4.0.1.5
x2go_servereq4.0.0.3
x2go_servereq4.0.1.0
x2go_servereq4.0.1.8
x2go_servereq4.0.1.3
x2go_servereq4.0.1.2
x2go_servereq4.0.0.4
x2go_servereq4.0.1.7
x2go_serverle4.0.0.7

Name	Operator	Version
x2go_server	eq	4.0.1.6
x2go_server	eq	4.0.1.5
x2go_server	eq	4.0.0.3
x2go_server	eq	4.0.1.0
x2go_server	eq	4.0.1.8
x2go_server	eq	4.0.1.3
x2go_server	eq	4.0.1.2
x2go_server	eq	4.0.0.4
x2go_server	eq	4.0.1.7
x2go_server	le	4.0.0.7