Lucene search
HistoryOct 15, 2014 - 2:55 p.m.
CVE-2014-3593
cve-2014-3593
eval injection
luci 0.26.0
remote attack
authenticated users
python code
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.3%
Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.
Affected configurations
Node
scientificlinuxluciMatch0.26.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| scientificlinux:luci | scientificlinux luci | eq | 0.26.0 |
Related
redhat
redhat
(RHSA-2014:1390) Moderate: luci security, bug fix, and enhancement update
2014-10-14 00:00:00
centos
centos
luci security update
2014-10-20 18:10:09
nessus
nessus
RHEL 6 : luci (RHSA-2014:1390)
2014-10-14 00:00:00
Scientific Linux Security Update : luci on SL6.x i386/x86_64 (20141014)
2014-11-04 00:00:00
CentOS 6 : luci (CESA-2014:1390)
2014-11-12 00:00:00
prion
prion
Design/Logic Flaw
2014-10-15 14:55:00
nvd
nvd
CVE-2014-3593
2014-10-15 14:55:06
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:02:24
cvelist
cvelist
CVE-2014-3593
2014-10-15 14:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.3%
Related for CVE-2014-3593