CVE-2019-12491

OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on servers managed by OnApp for XEN/KVM hypervisors. To exploit the vulnerability an attacker has to have control of a single server on a given cloud e.g. by renting one. From the sour...

CVE-2019-12491

CVE-2019-12491 affects OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196, allowing an attacker who controls a single server in a cloud to craft and trigger commands that execute with root privileges on a target server managed by OnApp for XEN/KVM hypervisors. The issue enables remote command executi...