Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Filtered by product Crowbar
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-3537 1 Dell 1 Crowbar 2023-12-10 4.6 MEDIUM N/A
The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.
CVE-2012-3551 1 Dell 1 Crowbar 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils.