CVE-2023-20017

CVE-2023-20017 affects Cisco Intersight Private Virtual Appliance. The root cause is insufficient input validation when extracting uploaded software packages, enabling an authenticated administrator to upload a crafted package and execute arbitrary commands on the underlying OS with root privileg...