Remote Code Execution (RCE)

2019-01-1509:08:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

77.2%

JSON

swiftonfile is vulnerable to remote code execution. A flaw was found in the way swiftonfile (gluster-swift) serialized and stored metadata on disk by using Python’s pickle module. A remote, authenticated user could use this flaw to execute arbitrary code on the storage node.

CPENameOperatorVersion
swiftonfileeq1.10.0__6.el6rhs
swiftonfileeq1.13.1__2.el6rhs
swiftonfileeq1.13.1__5.el6rhs
swiftonfileeq1.13.1__2.el7rhgs
swiftonfileeq1.13.1__5.el7rhgs