Описание
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:redhat:gluster_storage:3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.0223
Низкий
6 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
redhat
почти 11 лет назад
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
github
около 4 лет назад
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
EPSS
Процентиль: 81%
0.0223
Низкий
6 Medium
CVSS2
Дефекты
CWE-94