漏洞描述
LinuxKI v6.0-1 and earlier are vulnerable to remote code execution.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
packetstormsecurity.comhttp://packetstormsecurity.com/files/157739/HP-LinuxKI-6.01-Remote-Command-Injection.html↗packetstormsecurity.comhttp://packetstormsecurity.com/files/158025/LinuxKI-Toolset-6.01-Remote-Command-Execution.html↗github.comhttps://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2↗github.comhttps://github.com/HewlettPackard/LinuxKI/commit/10bef483d92a85a13a59ca65a288818e92f80d78↗www.hpe.comhttps://www.hpe.com/us/en/home.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-7209↗