Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a result, arbitrary data goes directly to the Bash interpreter. An attacker would need credentials to exploit this vulnerability. This is fixed in Object First Ootbi BETA build 1.0.13.1611.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Object First 安全漏洞
Vulnerability Description
Object First是Object First公司的一个 Veeam 的最佳存储解决方案。 Object First 1.0.7.712版本存在安全漏洞，该漏洞源于设置主机名的命令没有验证输入参数，导致任意数据可以直接进入Bash解释器，远程攻击者可以以root权限执行任意Bash代码。
CVSS Information
N/A
Vulnerability Type
N/A