CVE-2018-15529 A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands wit...
HighCVSS 8.8
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mutiny | < 6.1.0-5263 | 6.1.0-5263 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- doddsecurity.com
- github.com third-party-advisory
- www.mutiny.com