Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-4406

Опубликовано: 30 мая 2012
Источник: redhat
CVSS2: 7.5

Описание

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Ссылки на источники

Дополнительная информация

Статус:

Important
Дефект:
CWE-502
https://bugzilla.redhat.com/show_bug.cgi?id=854757Openstack-Swift: insecure use of python pickle()

7.5 High

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2012-4406

CVSS3: 9.8
ubuntu
около 14 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

nvd логотип

CVE-2012-4406

CVSS3: 9.8
nvd
около 14 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

debian логотип

CVE-2012-4406

CVSS3: 9.8
debian
около 14 лет назад

OpenStack Object Storage (swift) before 1.7.0 uses the loads function ...

github логотип

GHSA-v7mh-3jgf-r26c

CVSS3: 9.8
github
больше 4 лет назад

OpenStack Object Storage (swift) Code Injection vulnerability

7.5 High

CVSS2