Test ID:	1.3.6.1.4.1.25623.1.0.102067
Category:	Privilege escalation
Title:	Openmediavault < 0.5.32 Privilege Escalation Vulnerability
Summary:	Openmediavault is prone to a privilege escalation; vulnerability.
Description:	Summary: Openmediavault is prone to a privilege escalation vulnerability. Vulnerability Insight: The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter. Affected Software/OS: Openmediavault prior to version 0.5.32. Solution: Update to version 0.5.32 or later and disable the root user for cron jobs. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-3632 BugTraq ID: 62873 http://www.securityfocus.com/bid/62873 http://www.exploit-db.com/exploits/29323 https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats http://osvdb.org/99143
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.