rConfig 3.9.3
Approved changes feed: RSS · Atom
cpe:2.3:a:rconfig:rconfig:3.9.3:*:*:*:*:*:*:*
part: a version: 3.9.3 update: *
| Vendor | Rconfig (1c009c32-0004-509d-90f2-e11259ac94c2) |
|---|---|
| Product | Rconfig (e0cdb980-ee35-5685-9f30-581dd1c5c510) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/yukh/rconfig |
purl2cpe | 2026-06-01 10:13:24.685845 |
pkg:github/rconfig/rconfig |
purl2cpe | 2026-06-01 10:13:24.685847 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-19585 |
vulnerable | 2026-06-08 05:13:23.098773 |
Details available
An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.
Published: 2020-01-06T19:24:04.000Z
Updated: 2024-08-05T02:16:48.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19509 |
vulnerable | 2026-06-08 05:13:23.027223 |
Details available
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.
Published: 2020-01-06T19:27:27.000Z
Updated: 2024-08-05T02:16:48.197Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.