CVE-2019-19019

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is analogous to CVE-2019-6800 but for a different product.

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is analogous to CVE-2019-6800 but for a different product.

Se detectó un problema en TitanHQ WebTitan versiones anteriores a 5.18. Contiene un problema de Ejecución de Código Remota por medio del cual un atacante puede ejecutar código arbitrario como root. El problema proviene del mecanismo de descarga del parche en caliente (hotfix), que descarga un script de shell por medio de HTTP y luego lo ejecuta como root. Esto es similar a CVE-2019-6800 pero para un producto diferente.