| Package | Affected versions | Patched versions |
|---|---|---|
| amanda | = 3.3.9 |
In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free