Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the `--script=<script>` parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GlobalProtect-Openconnect 安全漏洞
Vulnerability Description
GlobalProtect-Openconnect是一个基于 OpenConnect 并使用 Qt5 构建的 Linux 的 GlobalProtect VPN 客户端 (GUI) ，支持 SAML 身份验证模式。 GlobalProtect-Openconnect 存在安全漏洞，该漏洞源于GlobalProtect-Openconnect 的设置方式允许任意用户通过提交特殊参数内容以 root 身份执行命令。
CVSS Information
N/A
Vulnerability Type
N/A