Test ID:	1.3.6.1.4.1.25623.1.1.12.2024.6711.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6711-1)
Summary:	The remote host is missing an update for the 'crmsh' package(s) announced via the USN-6711-1 advisory.
Description:	Summary: The remote host is missing an update for the 'crmsh' package(s) announced via the USN-6711-1 advisory. Vulnerability Insight: Vincent Berg discovered that CRM shell incorrectly handled certain commands. An local attacker could possibly use this issue to execute arbitrary code via shell code injection to the crm history commandline. Affected Software/OS: 'crmsh' package(s) on Ubuntu 20.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35459 https://bugzilla.suse.com/show_bug.cgi?id=1179999 https://github.com/ClusterLabs/crmsh/blob/a403aa15f3ea575adfe5e43bf2a31c9f9094fcda/crmsh/history.py#L476 https://github.com/ClusterLabs/crmsh/releases https://lists.debian.org/debian-lts-announce/2021/01/msg00021.html http://www.openwall.com/lists/oss-security/2021/01/12/3
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.