PT-2014-7126

Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue allows remote attackers to execute arbitrary commands or cause a denial of service by modifying the pager command string without requiring a password, potentially leveraging an...

CVE-2014-6260: Improper Neutralization of Special Elements used in a Command

Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, which allows remote attackers to execute arbitrary commands or cause a denial of service paging outage by leveraging an unattended workstation, aka ZEN-15412...