An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: CERT-PL
Published: 2024-01-12T14:24:32.311Z
Updated: 2024-08-02T21:53:45.304Z
Reserved: 2023-11-24T11:53:46.294Z
Link: CVE-2023-49257
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2024-01-12T15:15:09.230
Modified: 2024-01-18T21:13:51.623
Link: CVE-2023-49257
Redhat
No data.