7.2
Élevée
CVE-2024-8531 CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center…
Description
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Data Center Expert | Versions non publiées | |
| data_center_expert 8.1 | premières → 8.1.1.3 | Pas de correctif indiqué |
Autres CVE de Data Center Expert
Les 6 CVE de Data Center Expert →
CVE-2024-8530
CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data…
5.9
Moyenne
CVE-2022-32520
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
Élevée
CVE-2022-32521
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…
7.1
Élevée
CVE-2022-32518
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
Élevée