Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3EA60760E320A8CC8ED20892A638BFD1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
88.0%
CVE-2012-2395 cobbler: command injection flaw in the power management XML-RPC API
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pypi | ml-scanner | * | cpe:2.3:a:pypi:ml-scanner:*:*:*:*:*:pypi:*:* |
References
lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html
lists.opensuse.org/opensuse-security-announce/2012-07/msg00000.html
www.openwall.com/lists/oss-security/2012/05/23/18
bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999
github.com/advisories/GHSA-g34c-mg6m-xvxj
github.com/cobbler/cobbler/commit/6d9167e5da44eca56bdf42b5776097a6779aaadf
github.com/cobbler/cobbler/issues/141
nvd.nist.gov/vuln/detail/CVE-2012-2395
web.archive.org/web/20120712025653/www.securityfocus.com/bid/53666
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
88.0%