CVE-2014-4326
14h00 +00:00
CVE 描述
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Neutralization of Special Elements used in an OS Command The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component. |
指标
| 指标 | 评分 | 严重程度 | CVSS 向量 | 来源 |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS 评分
EPSS 百分位
相关产品
配置 0
Elastic>>Logstash >> Version 1.0.14
Elastic>>Logstash >> Version 1.0.15
Elastic>>Logstash >> Version 1.0.16
Elastic>>Logstash >> Version 1.0.17
Elastic>>Logstash >> Version 1.1.0
Elastic>>Logstash >> Version 1.1.0.1
Elastic>>Logstash >> Version 1.1.1
Elastic>>Logstash >> Version 1.1.2
Elastic>>Logstash >> Version 1.1.3
Elastic>>Logstash >> Version 1.1.4
Elastic>>Logstash >> Version 1.1.5
Elastic>>Logstash >> Version 1.1.6
Elastic>>Logstash >> Version 1.1.7
Elastic>>Logstash >> Version 1.1.8
Elastic>>Logstash >> Version 1.1.9
Elastic>>Logstash >> Version 1.1.10
Elastic>>Logstash >> Version 1.1.11
Elastic>>Logstash >> Version 1.1.12
Elastic>>Logstash >> Version 1.1.13
Elastic>>Logstash >> Version 1.2.1
Elastic>>Logstash >> Version 1.2.2
Elastic>>Logstash >> Version 1.3.0
Elastic>>Logstash >> Version 1.3.1
Elastic>>Logstash >> Version 1.3.2
Elastic>>Logstash >> Version 1.3.3
Elastic>>Logstash >> Version 1.4.0
Elastic>>Logstash >> Version 1.4.1
参考资料
Tags : mailing-list, x_refsource_BUGTRAQ
