Code injection

2022-07-2823:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON

WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.

CPENameOperatorVersion
global-workqueueeq1.4.1 rc5
reqmgr2eq1.4.0 rc2
reqmgr2eq1.4.1 rc5
reqmoneq1.4.1 rc5
wmagenteq1.3.3 rc2
wmagenteq1.3.3 rc1

Name	Operator	Version
global-workqueue	eq	1.4.1 rc5
reqmgr2	eq	1.4.0 rc2
reqmgr2	eq	1.4.1 rc5
reqmon	eq	1.4.1 rc5
wmagent	eq	1.3.3 rc2
wmagent	eq	1.3.3 rc1

References

github.com/dmwm/WMCore/issues/11188