Beveiligingsadvies

CVE-2011-4953

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-10-27 01:00:00
Laatst bijgewerkt 2024-08-07 00:23:38
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.