TI-2018-00598 CVE-2018-0643 · GHSA-cvwr-hpvw-jmx6OS command injection in ORCA Management Organization Co., Ltd. Ubuntu14.04 ORCA 4.8.0…Priority LOW 30Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-server) 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.CVSS 3.0MEDIUM 6.6· Adjacent network · High privileges · User interaction · EPSS 0.00533 · Published 2018-09-07 · No fix listed CWE-78
