Lucene search

K
prionPRIOn knowledge basePRION:CVE-2011-4953
HistoryOct 27, 2014 - 1:55 a.m.

Design/Logic Flaw

2014-10-2701:55:00
PRIOn knowledge base
www.prio-n.com
2

7.9 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.

CPENameOperatorVersion
cobblerle2.2.1

7.9 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%