Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-5340
HistorySep 02, 2014 - 12:00 a.m.

CVE-2014-5340

2014-09-0200:00:00
ubuntu.com
ubuntu.com
11

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.055

Percentile

93.2%

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses
the pickle Python module unsafely, which allows remote attackers to execute
arbitrary code via a crafted serialized object, related to an automation
URL.

Bugs

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.055

Percentile

93.2%