critical9.8
CVE-2020-24032
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
Impact
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xorux | Lpar2rrd | Version 2.7.0 |
| Xorux | Stor2rrd | Version 2.7.0 |