critical9.8
CVE-2021-40612
An issue was discovered in Opmantek Open-AudIT after 3.5.0.
Impact
An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opmantek | Open-Audit | from 3.5.0 before 4.3.0 |
References
- NVD record
- CVE.org record
- https://community.opmantek.com/pages/viewpage.action?pageId=65504438
- https://github.com/Opmantek/open-audit/commit/c7595cbb092e410a487f03c0eb536cf19e538860
- https://community.opmantek.com/pages/viewpage.action?pageId=65504438
- https://github.com/Opmantek/open-audit/commit/c7595cbb092e410a487f03c0eb536cf19e538860