CVE-2015-5274

Опубликовано: 16 сент. 2015

Источник: redhat

CVSS2: 6.5

Описание

rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker.

A command injection flaw was found in the OpenShift Origin Management Console. A remote, authenticated user permitted to send requests to the Broker could use this flaw to execute arbitrary commands with elevated privileges on the Red Hat OpenShift server.

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-20

https://bugzilla.redhat.com/show_bug.cgi?id=12625182.2: API command injection vulnerability

6.5 Medium

CVSS2

Связанные уязвимости

CVE-2015-5274

nvd

больше 10 лет назад

rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker.

GHSA-3fcg-qm7h-hhpw

github

больше 3 лет назад

rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker.

6.5 Medium

CVSS2