Skip to content
Threat Feed
Subscribe

Product

Glances (4.5.2 to 4.5.5)

1 brief RSS
high advisory

Incomplete Fix for Glances Configuration Command Execution Bypass

Glances versions up to 4.5.5 contain a vulnerability where the --disable-config-exec flag fails to sanitize shell operators in on-alert action commands, allowing arbitrary command execution or file redirection.

Glances +1 vulnerability remote-code-execution security-bypass command-injection local-privilege-escalation
2t 2c