Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

Summary

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.

Remediation

1. Inventory every Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US