CVE-2012-5646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-5646
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2013-0148.html Vendor Advisory
http://www.osvdb.org/89431
http://www.securityfocus.com/bid/57189
https://bugzilla.redhat.com/show_bug.cgi?id=888518
https://github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00
https://github.com/openshift/origin-server/pull/1017
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:openshift:1.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:redhat:openshift_origin:*:*:*:*:*:*:*:*
History

13 Feb 2023, 04:37

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2013:0148', 'name': 'https://access.redhat.com/errata/RHSA-2013:0148', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-5646', 'name': 'https://access.redhat.com/security/cve/CVE-2012-5646', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2012-5646 openshift-origin-node-util: restorer.php preg_match shell code injection node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.

02 Feb 2023, 18:16

Type Values Removed Values Added
Summary node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO. CVE-2012-5646 openshift-origin-node-util: restorer.php preg_match shell code injection
References
  • (MISC) https://access.redhat.com/errata/RHSA-2013:0148 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-5646 -
Information

Published : 2013-02-24 21:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-5646

Mitre link : CVE-2012-5646

CVE.ORG link : CVE-2012-5646

JSON object : View

Products Affected

redhat

  • openshift_origin
  • openshift
CWE
CWE-20

Improper Input Validation