RULE(RULE ID:333504)

Rule General Information
Release Date: 2021-04-25
Rule Name: Agentejo Cockpit CMS Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Agenejo Cockpit is a management system for managing structured content in web sites from the German company Agenejo Cockpit. The remote code execution vulnerability of Agenejo Cockpit prior to the 0.11.2 release of Agenejo Cockpit allows an authenticated user to execute arbitrary code.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
The vendor has released upgrade patches to fix vulnerabilities, please visit:
https://github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b