CVE-2015-3431: Command Injection
Published Sep 19, 2017
·Updated
Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."
Affected Software
1 affected component
Pydio Pydio<=6.0.6
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3431?
CVE-2015-3431 is considered a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2015-3431?
To mitigate CVE-2015-3431, upgrade Pydio to version 6.0.7 or later.
3
What types of attacks are possible due to CVE-2015-3431?
CVE-2015-3431 allows remote attackers to execute arbitrary commands, compromising the affected system.
4
Which versions of Pydio are affected by CVE-2015-3431?
All versions of Pydio prior to 6.0.7 are affected by CVE-2015-3431.
5
Does CVE-2015-3431 affect any other software apart from Pydio?
CVE-2015-3431 specifically affects Pydio and does not apply to other software.