Command Injection Vulnerability in ScienceLogic SL1 by ScienceLogic

CVE-2022-48583

What is CVE-2022-48583?

A command injection flaw in the ScienceLogic SL1 dashboard scheduler allows an attacker to exploit unsanitized user inputs. By submitting malicious commands, an attacker may manipulate the underlying operating system, potentially leading to unauthorized access or system compromise. Organizations utilizing ScienceLogic SL1 should prioritize assessing their systems for this vulnerability and implement appropriate mitigations.

References