CVE-2014-4326
14h00 +00:00
CVE の説明
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Neutralization of Special Elements used in an OS Command The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
関連製品
構成 0
Elastic>>Logstash >> Version 1.0.14
Elastic>>Logstash >> Version 1.0.15
Elastic>>Logstash >> Version 1.0.16
Elastic>>Logstash >> Version 1.0.17
Elastic>>Logstash >> Version 1.1.0
Elastic>>Logstash >> Version 1.1.0.1
Elastic>>Logstash >> Version 1.1.1
Elastic>>Logstash >> Version 1.1.2
Elastic>>Logstash >> Version 1.1.3
Elastic>>Logstash >> Version 1.1.4
Elastic>>Logstash >> Version 1.1.5
Elastic>>Logstash >> Version 1.1.6
Elastic>>Logstash >> Version 1.1.7
Elastic>>Logstash >> Version 1.1.8
Elastic>>Logstash >> Version 1.1.9
Elastic>>Logstash >> Version 1.1.10
Elastic>>Logstash >> Version 1.1.11
Elastic>>Logstash >> Version 1.1.12
Elastic>>Logstash >> Version 1.1.13
Elastic>>Logstash >> Version 1.2.1
Elastic>>Logstash >> Version 1.2.2
Elastic>>Logstash >> Version 1.3.0
Elastic>>Logstash >> Version 1.3.1
Elastic>>Logstash >> Version 1.3.2
Elastic>>Logstash >> Version 1.3.3
Elastic>>Logstash >> Version 1.4.0
Elastic>>Logstash >> Version 1.4.1
参考資料
Tags : mailing-list, x_refsource_BUGTRAQ
