high7.2
CVE-2024-38288
A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administ…
Impact
A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underlying server as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rhubcom | Turbomeeting | before 8.0 |