Lucene search
HistoryAug 23, 2011 - 9:55 p.m.
CVE-2011-2646
cve-2011-2646
kiwi
suse studio
vulnerability
remote code execution
nvd
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.059 Low
EPSS
Percentile
93.5%
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.
Affected configurations
Node
marcus_schaferkiwiRange≤3.74.1
ORnovellsuse_studio_onsiteMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| marcus_schafer:kiwi | marcus schafer kiwi | le | 3.74.1 |
| novell:suse_studio_onsite | novell suse studio onsite | eq | 1.1 |
Related
cvelist
cvelist
CVE-2011-2646
2011-08-23 21:00:00
prion
prion
Code injection
2011-08-23 21:55:00
nvd
nvd
CVE-2011-2646
2011-08-23 21:55:01
suse
suse
Security update for kiwi (critical)
2011-08-18 09:08:24
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.059 Low
EPSS
Percentile
93.5%
Related for CVE-2011-2646