Threats tagged 'ghsa-78hc-4g8w-ppr6'

A vulnerability in Zenitel Connect before version 1.11.0 allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host. This occurs because the host configuration watcher applies a rsyslog configuration file from a shared data volume, which can be crafted maliciously.