myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.
myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 85.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 85.00 |
VPI 公式 vpi-v1