← CVE Intelligence

CVE-2022-1399

Remote code execution in scheduled tasks component PUBLISHED

Description (CNA)

An Argument Injection or Modification vulnerability in the "Change Secret" username field as used in the Discovery component of Device42 CMDB allows a local attacker to run arbitrary code on the appliance with root privileges. This issue affects: Device42 CMDB version 18.01.00 and prior versions.

Affected (CNA)

Vendor / productVersions
Device42 / CMDBaffected unspecified before 18.01.00

CWE

CWE-88

References

ADP enrichment

CVE

No English description supplied.