Security Advisory

CVE-2014-2888

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-23 14:00:00
Last updated 2024-08-06 10:28:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request.