CVE-2019-1732

Cisco NX-OS Software Remote Package Manager (RPM) is affected by a TOCTOU race in the RPM subsystem that can allow an authenticated local attacker with administrator credentials to corrupt variables and perform arbitrary command injection. The root cause is a lack of proper locking on critical va...