Description (CNA)
Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sangfor / aTrust | affected 2.4.10 |
CWE
CWE-732
References
- https://github.com/r00t7oo2jm/cVetest/blob/main/p0c.sh
- https://github.com/r00t7oo2jm/cVetest/blob/main/sangf0r-poc.pdf
- https://marketplace.huaweicloud.com/intl/contents/10d76e5f-57b5-4780-9c0c-58af8f7f71e6
- https://community.sangfor.com/forum.php?mod=viewthread&tid=10842
ADP enrichment
No English description supplied.
No references supplied.