Lucene search
HistoryNov 04, 2015 - 3:59 a.m.
CVE-2015-5673
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.038
Percentile
91.9%
eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a “gcloud compute” command.
Affected configurations
Node
isuconisucon_5_qualifier_eventappMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| isucon | isucon_5_qualifier_eventapp | - | cpe:2.3:a:isucon:isucon_5_qualifier_eventapp:-:*:*:*:*:*:*:* |
Related
prion
prion
Command injection
2015-11-04 03:59:00
cvelist
cvelist
CVE-2015-5673
2015-11-04 02:00:00
cve
cve
CVE-2015-5673
2015-11-04 03:59:05
jvn
jvn
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.038
Percentile
91.9%
Related for NVD:CVE-2015-5673