cve/2019/CVE-2019-9924.md

CVE-2019-9924

Description

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

POC

Reference

No PoCs from references.

Github

• https://github.com/KorayAgaya/TrivyWeb
• https://github.com/Mohzeela/external-secret
• https://github.com/sandinak/sudosh
• https://github.com/siddharthraopotukuchi/trivy
• https://github.com/simiyo/trivy
• https://github.com/t31m0/Vulnerability-Scanner-for-Containers
• https://github.com/umahari/security