Arbitrary Command Execution Vulnerability in BACKCLICK Professional 5.9.63

CVE-2022-43999 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system commands can be executed on the server.

Learn more about our Cis Benchmark Audit For Server Software.