Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9f7g-mcxq-q3vc

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.

EPSS

Процентиль: 88%
0.03636
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 14 лет назад

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.

EPSS

Процентиль: 88%
0.03636
Низкий

Дефекты

CWE-20