CVE-2020-5350: OS Command Injection

First published: Tue Mar 31 2020(Updated: )

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords and execution of malicious commands on ACM component.

Credit: security_alert@emc.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/weakness
• agent/severity
• agent/author
• agent/type
• agent/description
• agent/event
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/dell
• canonical/dell emc integrated data protection appliance
• version/dell emc integrated data protection appliance/2.0
• version/dell emc integrated data protection appliance/2.1
• version/dell emc integrated data protection appliance/2.2
• version/dell emc integrated data protection appliance/2.3
• version/dell emc integrated data protection appliance/2.4