CVE-2019-18910 in ThinPro

Résumé

par MITRE

The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with local user privileges.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 12/11/2019
• Modérer: accepté
• Entrée: VDB-146157
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 6.8 (NVD)
• EPSS: 0.00647
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-18910
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-18910
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-18910/