Threats tagged 'ghsa-427g-vh98-w9cm'

Two OS command injection vulnerabilities exist in the update installation functionality due to insufficient validation of update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that executes arbitrary commands with root privileges. This allows reading or modifying sensitive data, changing appliance configuration, or shutting down the appliance.