EUVD-2012-6595

Malware in sbrugna...

PT-2025-32401 · Zenoss · Zenoss Core

Name of the Vulnerable Software and Affected Versions: Zenoss Core versions 3.x Description: Zenoss Core contains a command injection issue in the showDaemonXMLConfig API endpoint. The daemon parameter is directly passed to a Popen call in ZenossInfo.py without proper sanitization, potentially...