CoreCVE
Back

HIGH

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method

Published Dec 5, 2011

Description

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 5, 2011
Updated Aug 6, 2024
Reserved Jun 6, 2011
Link CVE-2011-2397
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2011-2397
Red Hat
Severity n/a
Public date n/a
Links CVE-2011-2397