Beveiligingsadvies

CVE-2011-4356

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-12-05 11:00:00

Laatst bijgewerkt 2024-08-07 00:09:18

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.

← Alle CVE's bekijken Bekijk op cve.org ↗