CVE-2019-11364

An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2019-08-29

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Snare Central (Prophecyinternational)

References

• https://prophecyinternational.atlassian.net/wiki/spaces/SC7/pages/158760961/Release+Notes+for+Snare+Central+v7.4.5