Test Kennung:	1.3.6.1.4.1.25623.1.0.143319
Kategorie:	Web application abuses
Titel:	Plex Media Server < 1.18.2.2041 RCE Vulnerability
Zusammenfassung:	Plex Media Server is prone to an authenticated remote code execution; vulnerability in the Camera Upload feature.
Beschreibung:	Summary: Plex Media Server is prone to an authenticated remote code execution vulnerability in the Camera Upload feature. Vulnerability Insight: The Camera Upload functionality in Plex Media Server allows remote authenticated users to write files anywhere the user account running the Plex Media Server has permissions. This allows remote code execution via a variety of methods, such as (on a default Ubuntu installation) creating a .ssh folder in the plex user's home directory via directory traversal, uploading an SSH authorized_keys file there, and logging into the host as the Plex user via SSH. Affected Software/OS: Plex Media Server prior to version 1.18.2.2041. Solution: Update to version 1.18.2.2041 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-19141
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.