High severity8.8NVD Advisory· Published Nov 7, 2022· Updated Jun 17, 2026
CVE-2022-44794
CVE-2022-44794
Description
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a result, arbitrary data goes directly to the Bash interpreter. An attacker would need credentials to exploit this vulnerability. This is fixed in Object First Ootbi BETA build 1.0.13.1611.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Object First/Ootbidescription
- Range: 1.0.7.712 - 1.0.13.1611
Patches
Vulnerability mechanics
References
1- objectfirst.com/security/of-20221024-0001/nvdVendor Advisory
News mentions
0No linked articles in our index yet.