Vulnerabilities > Opendoas Project > Opendoas > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-01-28 CVE-2019-25016 Missing Initialization of Resource vulnerability in Opendoas Project Opendoas 6.6/6.6.1/6.8
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command.
network
low complexity
opendoas-project CWE-909
6.5