Fortra BoKS Manager contains a command injection vulnerability (CWE-78) in the crlserver component. An authenticated user authorized to add Certificate Revocation List (CRL) URLs through BCC, WSI REST or SOAP API, or the cacrl command-line interface can cause shell command substitution to be executed with root privileges on the BoKS Master. BCC and WSI provide network-accessible administration paths that do not require local sudo or suexec rules, while non-root use of cacrl requires such rules. This vulnerability affects versions >=8.1.0.0 <=8.1.0.23 and >=9.0.0.0 <=9.0.0.6. The CVSS v3.1 base score is 9.1, indicating critical severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided in the input data.

Successful exploitation allows an authenticated user with permission to add CRL URLs to execute arbitrary shell commands as root on the BoKS Master system. This can lead to full system compromise, including complete control over the affected system and potential disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the BCC, WSI REST, SOAP APIs, and cacrl CLI to trusted administrators only. Monitor for unauthorized attempts to add CRL URLs and consider applying local sudo or suexec rules where applicable to limit command execution privileges.