Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.
References
Link | Resource |
---|---|
https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2 | Patch Release Notes Third Party Advisory |
https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes | Patch Release Notes Third Party Advisory |
https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2 | Patch Release Notes Third Party Advisory |
https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2 | Patch Release Notes Third Party Advisory |
https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes | Patch Release Notes Third Party Advisory |
https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2 | Patch Release Notes Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 03:03
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2 - Patch, Release Notes, Third Party Advisory | |
References | () https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes - Patch, Release Notes, Third Party Advisory | |
References | () https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2 - Patch, Release Notes, Third Party Advisory |
Information
Published : 2017-07-17 13:18
Updated : 2024-11-21 03:03
NVD link : CVE-2017-1000009
Mitre link : CVE-2017-1000009
CVE.ORG link : CVE-2017-1000009
JSON object : View
Products Affected
akeneo
- product_information_management
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')