Security Advisory

CVE-2012-4406

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-10-22 23:00:00
Last updated 2024-08-06 20:35:09
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.