A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underlying server as root.
Metrics
Affected Vendors & Products
References
History
Tue, 13 Aug 2024 13:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Rhubcom
Rhubcom turbomeeting |
|
CPEs | cpe:2.3:a:rhubcom:turbomeeting:*:*:*:*:*:*:*:* | |
Vendors & Products |
Rhubcom
Rhubcom turbomeeting |
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-07-25T00:00:00
Updated: 2024-08-02T04:04:25.099Z
Reserved: 2024-06-13T00:00:00
Link: CVE-2024-38288
Vulnrichment
Updated: 2024-07-26T19:33:46.557Z
NVD
Status : Analyzed
Published: 2024-07-25T20:15:04.953
Modified: 2024-08-13T13:25:45.940
Link: CVE-2024-38288
Redhat
No data.