CVE-2020-19907

The CVE-2020-19907 entry describes a command-injection vulnerability in the sandcat plugin of Caldera versions 2.3.1 and earlier . The root cause is not elaborated beyond the vulnerable plugin allowing an authenticated attacker to execute arbitrary commands or services. Impact is scoped to an aut...