A vulnerability was found in Shrubbery tac_plus up to 2.x/3.x/4.0.4.28. It has been rated as critical. Affected by this issue is some unknown functionality of the file tac_plus.cfg of the component Configuration File Handler. The manipulation leads to os command injection.
This vulnerability is handled as CVE-2023-48643. The attack may be launched remotely. There is no exploit available.