Описание
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:redhat:gluster_storage:3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 79%
0.01202
Низкий
6 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
redhat
больше 10 лет назад
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
github
больше 3 лет назад
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
EPSS
Процентиль: 79%
0.01202
Низкий
6 Medium
CVSS2
Дефекты
CWE-94