SCM Software is a client and server application. An...
High severity
Unreviewed
Published
Mar 27, 2024
to the GitHub Advisory Database
•
Updated Mar 27, 2024
Description
Published by the National Vulnerability Database
Mar 27, 2024
Published to the GitHub Advisory Database
Mar 27, 2024
Last updated
Mar 27, 2024
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.
References