CVE-2017-8799

Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users potentially anonymous to execute remote shell commands via iRODS virtual pathnames. To exploit this vulnerability, a virtual iRODS pathname that includes a semicolon would be retrieved vi...

PT-2017-18538

Name of the Vulnerable Software and Affected Versions iRODS versions prior to 4.1.11 iRODS versions prior to 4.2.1 Description The issue allows execution of untrusted input via igetwild in iRODS, enabling other users, potentially anonymous, to execute remote shell commands through iRODS virtual...