| Package | Affected versions | Patched versions |
|---|---|---|
| access commander | < 3.4.2 | 3.4.2 |
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free