CVE-2024-5480

Description

This CVE is under investigation by Red Hat Product Security.

Statement

This CVE has been marked as Rejected by the assigning CNA.

Understanding the Weakness (CWE)

Integrity,Confidentiality,Availability

Technical Impact: Execute Unauthorized Code or Commands

If a malicious user injects a character (such as a semi-colon) that delimits the end of one command and the beginning of another, it may be possible to then insert an entirely new and unrelated command that was not intended to be executed. This gives an attacker a privilege or capability that they would not otherwise have.

Frequently Asked Questions

Want to get errata notifications? Sign up here.