CVE-2010-4099

  • Last update: Apr 13, 2023

Description

ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.

Software From Fixed in
nitrosecurity / nitroview_esm_software 8.4.0a 8.4.0a.x

Details

    • Severity: Medium
  • CVE: CVE-2010-4099
  • Published: Oct 27, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs