CVE-2019-18910
The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with local user privileges.
- Score
- CVSS 3.1 6.8 Medium
- Status
- Modified - hp-security-alert@hp.com
- Published
- 2019-11-22
- Last modified
- 2024-08-05
- Weaknesses
- CWE-78
Affected products
- Thinpro (Hp)
- Thinpro Linux (Hp)
References
- http://packetstormsecurity.com/files/156909/HP-ThinPro-6.x-7.x-Privileged-Command-Injection.html
- http://seclists.org/fulldisclosure/2020/Mar/40
- https://support.hp.com/us-en/document/c06509350
