CVE-2022-48582

Summary

CVE-2022-48582 is a command injection vulnerability affecting the ticket report generate feature of ScienceLogic SL1. This issue arises due to the lack of input sanitization, allowing users to inject arbitrary shell commands and potentially gain unauthorized access to the underlying operating system. The vulnerability poses a significant risk to the security of ScienceLogic SL1 systems, and immediate remediation is advised to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.