Lucene search
Veracode Vulnerability DatabaseVERACODE:31917HistorySep 02, 2021 - 10:26 a.m.
Untrusted Code Deserialization
2021-09-0210:26:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
35.0%
rundeck is vulnerable to deserialization attack. An attacker is able to exploit the vulnerability by uploading a maliciously crafted aclpolicy yaml file to the server which will deserialise run the remote code when a user makes a POST request to it.
Related
osv
osv
CVE-2021-39132
2021-08-30 20:15:07
YAML deserialization can run untrusted code
2021-09-01 18:27:01
cvelist
cvelist
CVE-2021-39132 YAML deserialization can run untrusted code
2021-08-30 19:35:10
cnvd
cnvd
Rundeck code issue vulnerability
2021-09-01 00:00:00
prion
prion
Authentication flaw
2021-08-30 20:15:00
github
github
YAML deserialization can run untrusted code
2021-09-01 18:27:01
nvd
nvd
CVE-2021-39132
2021-08-30 20:15:07
cve
cve
CVE-2021-39132
2021-08-30 20:15:07