Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7089
HistoryJul 18, 2018 - 5:39 a.m.

Remote Code Execution (RCE)

2018-07-1805:39:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.017

Percentile

87.9%

mcollective-client is vulnerable to remote code execution. This is due to the use of eval to evaluate comparison expressions in discovery filters, which allows an attacker to execute arbitrary code via the mco ping command.

EPSS

0.017

Percentile

87.9%