Command injection

2023-07-0308:15:00

PRIOn knowledge base

www.prio-n.com

injection vulnerability

esm certificate api

unauthorized access

system command execution

privilege escalation

arbitrary commands

0.0004 Low

EPSS

Percentile

9.8%

JSON

An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.

CPENameOperatorVersion
enterprise_security_managerlt11.6.7

CPE	Name	Operator	Version
	enterprise_security_manager	lt	11.6.7

References

kcm.trellix.com/corporate/index?page=content&id=SB10403

0.0004 Low

EPSS

Percentile

9.8%

JSON

Related for PRION:CVE-2023-3313