Threats tagged 'ghsa-9v7w-2fr3-g7q8'

A signature verification vulnerability exists in the update installation process due to inconsistent validation of update bundle contents. An attacker with administrative privileges can supply a crafted update bundle that passes signature verification but executes an unsigned script with root privileges. This allows the attacker to read or modify sensitive data, alter appliance configuration, or shut down the appliance.