Description (CNA)
A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit() and canDelete() methods invoke nonexistent methods on the ZM\User class, causing PHP __call() to return a truthy value that bypasses the permission check for all users. Any authenticated user can trigger filter-based OS command execution regardless of their assigned role.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ZoneMinder / ZoneMinder | affected 0 through 1.39.17 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.