Command Injection Vulnerability in Versa Director

CVE-2019-25029

What is CVE-2019-25029?

In Versa Director, a command injection vulnerability allows attackers to execute arbitrary commands on the host operating system. This occurs when user-supplied data is inadequately validated, enabling attackers to manipulate input data, such as forms or HTTP headers, to pass unsafe commands to the system shell. The executed commands run with the same privileges as the vulnerable application, potentially leading to unauthorized access and control over the affected system.

References