CVE-2022-34558

Опубликовано: 28 июл. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.

Ссылки

https://github.com/dmwm/WMCore/issues/11188
Exploit
Issue Tracking
Third Party Advisory
https://github.com/dmwm/WMCore/issues/11188
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:global-workqueue_project:global-workqueue:1.4.1:rc5:*:*:*:python:*:*

cpe:2.3:a:reqmgr2_project:reqmgr2:1.4.0:rc2:*:*:*:python:*:*

cpe:2.3:a:reqmgr2_project:reqmgr2:1.4.1:rc5:*:*:*:python:*:*

cpe:2.3:a:reqmon_project:reqmon:1.4.1:rc5:*:*:*:python:*:*

cpe:2.3:a:wmagent_project:wmagent:1.3.3:rc1:*:*:*:python:*:*

cpe:2.3:a:wmagent_project:wmagent:1.3.3:rc2:*:*:*:python:*:*

EPSS

Процентиль: 74%

0.00801

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4vq7-8699-4xgc