Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-11467
HistoryJul 20, 2017 - 12:29 a.m.

Design/Logic Flaw

2017-07-2000:29:00
PRIOn knowledge base
www.prio-n.com
3

9.6 High

AI Score

Confidence

High

0.328 Low

EPSS

Percentile

97.1%

OrientDB through 2.2.22 does not enforce privilege requirements during “where” or “fetchplan” or “order by” use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

CPENameOperatorVersion
orientdble2.2.22

9.6 High

AI Score

Confidence

High

0.328 Low

EPSS

Percentile

97.1%