CVE-2014-0156

Опубликовано: 30 июн. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.

Ссылки

https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
Patch
Third Party Advisory
https://rubysec.com/advisories/CVE-2014-0156/
Third Party Advisory
https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
Patch
Third Party Advisory
https://rubysec.com/advisories/CVE-2014-0156/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:manageiq:awesomespawn:*:*:*:*:*:*:*:*

Версия от 1.2.0 (включая) до 1.5.0 (исключая)

EPSS

Процентиль: 80%

0.01367

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2014-0156

CVSS3: 8.1

redhat

почти 12 лет назад

GHSA-qpqw-mc85-qvm9