high7.8
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.
Impact
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Desktop \& Server Management | before 2022.2 Version 2022.2 |