Описание
eDeploy has RCE via cPickle deserialization of untrusted data
Отчет
Red Hat does not currently ship eNovance edeploy in a product form and as such this issue has been filed upstream.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat JBoss Enterprise Web Server 1 | eDeploy | Affected |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-306
https://bugzilla.redhat.com/show_bug.cgi?id=1152544eDeploy: Remote code execution due to cPickle deserialization of untrusted data
7.5 High
CVSS2
Связанные уязвимости
CVSS3: 9.8
nvd
около 6 лет назад
eDeploy has RCE via cPickle deserialization of untrusted data
CVSS3: 9.8
debian
около 6 лет назад
eDeploy has RCE via cPickle deserialization of untrusted data
CVSS3: 9.8
github
больше 3 лет назад
eDeploy has RCE via cPickle deserialization of untrusted data
7.5 High
CVSS2