Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Druva 操作系统操作系统命令注入漏洞
Vulnerability Description
Druva是美国Druva公司的一个大规模 SaaS 平台。将公有云的简单性、可扩展性和安全性带入企业数据保护和管理。 Druva 6.9.0 版本存在操作系统命令注入漏洞，该漏洞源于允许具有设备用户级权限的攻击者以非 root 用户身份执行任意操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A