exploitDog

CVE-2014-8174

Опубликовано: 19 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1202972
Issue Tracking
Third Party Advisory
VDB Entry
https://github.com/redhat-cip/edeploy/issues/230
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1202972
Issue Tracking
Third Party Advisory
VDB Entry
https://github.com/redhat-cip/edeploy/issues/230
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:edeploy:*:*:*:*:*:*:*:*

Версия до 1.11.0 (включая)

EPSS

Процентиль: 86%

0.03011

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2014-8174

CVSS3: 9.8

debian

почти 9 лет назад

eDeploy makes it easier for remote attackers to execute arbitrary code ...

GHSA-pcpj-m2cg-49x4

CVSS3: 9.8

github

больше 4 лет назад

eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.

EPSS

Процентиль: 86%

0.03011

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-200