UAC vulnerabilities
4 known vulnerabilities in UAC from Tclahr. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings wi
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before bei
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, proc
- 7.8 High severity
UAC: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the _run_command() function passes constructed command strings directly to eval without proper