Eclipse ioFog Operator command injection vulnerability

Versions 1.0.0 through 3.7.0 and versions 3.8.0-rc.1 through 3.9.1 of the Eclipse ioFog Operator contain a command injection vulnerability. This vulnerability arises because the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands, allowing...