Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-4406

Опубликовано: 30 мая 2012
Источник: redhat
CVSS2: 7.5
EPSS Низкий

Описание

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Дополнительная информация

Статус:

Important
Дефект:
CWE-502
https://bugzilla.redhat.com/show_bug.cgi?id=854757Openstack-Swift: insecure use of python pickle()

EPSS

Процентиль: 88%
0.04125
Низкий

7.5 High

CVSS2

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 13 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

CVSS3: 9.8
nvd
больше 13 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

CVSS3: 9.8
debian
больше 13 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function ...

CVSS3: 9.8
github
больше 3 лет назад

OpenStack Object Storage (swift) Code Injection vulnerability

EPSS

Процентиль: 88%
0.04125
Низкий

7.5 High

CVSS2