CVE-2022-39245 Mist vulnerable to user providing a Sudo binary for authentication checks

Mist is the command-line interface for the makedeb Package Repository. Prior to version 0.9.5, a user-provided sudo binary via the PATH variable can allow a local user to run arbitrary commands on the user's system with root permissions. Versions 0.9.5 and later contain a patch. No known...

Security Bulletin: Storwize V7000 Unified Fix Available for Code Injection via Command Line Interface and Graphical User Interface (CVE-2012-2163)

Abstract Storwize V7000 Unified has a vulnerability that allows the administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the Storwize V7000 Unified Command Line Interface and the Graphical User...

Security Bulletin: SONAS Fix Available for Code Injection via Command Line Interface and SONAS Graphical User Interface (CVE-2012-2163)

Abstract SONAS has a vulnerability that allows SONAS administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the SONAS Command Line Interface and the SONAS Graphical User Interface could be leveraged ...

Mist 代码问题漏洞

Mist is the official command line interface to the makedeb package repository, a makedeb open source. A code issue vulnerability exists in Mist 0.9.5 and earlier versions, which stems from a user-supplied sudo binary via the PATH variable that allows a local user to run arbitrary commands on the...

Security Bulletin: Vulnerability in command line interface (CVE-2013-5455)

Abstract Any user, even with READ-ONLY access to everything, has the ability to start/stop/DELETE ANY virtual system using the command line interface. Content VULNERABILITY DETAILS: DESCRIPTION: Any user, even with READ-ONLY access to everything, has the ability to start/stop/DELETE ANY virtual...

Security Bulletin: IBM Workload Deployer - Security vulnerability found in the command-line interface (CVE-2013-5455)

Abstract A security vulnerability found in the command-line interface allows users with read-only rights to delete, start, and stop any virtual system. Content Authenticated users of IBM Workload Deployer 3.1.0.0 and later with lesser privilege roles can use the command-line interface to perform...

conntrack-tools bug fix and enhancement update

An update is available for conntrack-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The conntrack-tools packages enable the user to set up a High...

IPython Shell Command Injection

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2022-5198 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: A vulnerability in Brocade Fabric OS CLI could allow a loc...

CVE-2022-33182. Privilege escalation using switch commands "supportlink", "firmwaredownload", "portcfgupload","license", and "fosexec".

Security Advisory ID : BSA-2022-2084 Component : FOS Revision : 2.0 A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands "supportlink...

PT-2022-5068 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS version 9.0.1e and earlier Brocade Fabric OS version 8.2.3c and earlier Brocade Fabric OS version 8.2.0cbn5 and earlier Brocade Fabric OS version 7.4.2.j and earlier Description: The...

Cisco Nexus Dashboard File Write

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-write any files on the vulnerable devic...

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

Docker CLI Arbitrary Credentials

The vulnerability of the Command Line Interface CLI of the deployment and application management tool in Docker-enabled environments is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain arbitrary user...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

FXOS CLI Command Execution Root Privilege

The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Error: User not authorized to execute this command when executing commands via CLI or GUI

Local User Receives:ERROR: Not authorized to execute this commandon CLI and in GUI. CLI GUI...

CVE-2022-31238

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure...

PT-2022-6318 · Zyxel · Zywall/Usg +3

Name of the Vulnerable Software and Affected Versions: Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72 Zyxel VPN series firmware versions 4.30 through 5.32 Zyxel USG FLEX series firmware versions 4.50 through 5.32 Zyxel ATP series firmware versions 4.32 through 5.32 Description: The...