CVE-2020-24032

CVE-2020-24032 affects XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances via the tz.pl script: it permits command injection through shell metacharacters in the timezone (cmd=set&tz=OS). The Red Hat/PRION/PR security records corroborate the same vulnerability. No exploitation status is provided ...