PT-2019-15850

Name of the Vulnerable Software and Affected Versions Zmanda Management Console version 3.3.9 Description The issue allows for CSRF, as demonstrated by command injection with shell metacharacters, potentially due to weak default credentials. This can be exploited through the "ZMC Admin...

CVE-2019-19469: Improper Neutralization of Special Elements used in an OS Command

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...