Headline
CVE-2020-24032: Storage Monitoring EMC² IBM Hitachi HPE NetApp Lenovo
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
Each package is able to monitor all supported devices
STOR2RRD is an Open Source software
STOR2RRD is published as free, open source software under the General Public License version 3. You can download and use it as much as you want free of charge. All use of our software is at your own risk as stated in the GPLv3. While we do our best to make the world’s best monitoring software. XORUX company does not provide any guarantees and cannot be hold liable for any issues you may encounter.
XORUX does provide just limited support services if you run into troubles while using STOR2RRD. Support and guarantees are available on commercial terms from XORUX or our partners. There are also many resources you can use to learn STOR2RRD and support yourself or get peer support online.