HP ThinPro 6.x / 7.x Privileged Command Injection Vulnerability

HP ThinPro - Privileged command injection =============================================================================== Identifiers ------------------------------------------------- CVE-2019-18910 CVSSv3 score ------------------------------------------------- 7.6...

HP ThinPro 6.x / 7.x Privileged Command Injection

HP ThinPro - Privileged command injection =============================================================================== Identifiers ------------------------------------------------- CVE-2019-18910 CVSSv3 score ------------------------------------------------- 7.6...

CVE-2019-18910

CVE-2019-18910 involves the Citrix Receiver wrapper function that does not safely handle user input, enabling command injection to execute with local privileges. Affected products include HP ThinPro Linux (versions 6.2, 6.2.1, 7.0, 7.1) where the vulnerability can occur through the Citrix Receive...