CVE-2017-1000009

EPSS 3.93%
Veröffentlicht 17.07.2017 13:18:16
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 118 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Akeneo ≫ Product Information Management Version 1.4.0 Update - SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.0 Update beta1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.0 Update beta2 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.0 Update beta3 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.0 Update rc1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.2 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.3 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.4 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.5 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.6 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.7 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.8 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.9 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.10 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.11 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.12 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.13 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.14 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.15 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.16 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.17 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.18 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.19 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.20 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.21 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.22 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.23 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.24 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.25 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.26 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.27 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.0 Update - SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.0 Update alpha1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.0 Update beta1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.0 Update rc1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.2 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.3 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.4 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.5 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.6 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.7 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.8 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.9 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.10 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.11 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.12 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.13 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.5.14 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.0 Update - SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.0 Update alpha1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.0 Update alpha2 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.0 Update rc1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.1 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.2 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.3 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.4 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.6.5 SwEdition enterprise

Akeneo ≫ Product Information Management Version 1.4.0 Update - SwEdition community

Akeneo ≫ Product Information Management Version 1.4.0 Update beta1 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.0 Update beta2 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.0 Update beta3 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.0 Update rc1 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.1 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.2 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.3 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.4 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.5 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.6 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.7 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.8 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.9 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.10 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.11 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.12 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.13 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.14 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.15 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.16 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.17 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.18 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.19 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.20 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.21 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.22 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.23 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.24 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.25 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.26 SwEdition community

Akeneo ≫ Product Information Management Version 1.4.27 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.0 Update - SwEdition community

Akeneo ≫ Product Information Management Version 1.5.0 Update alpha1 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.0 Update beta1 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.0 Update rc1 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.1 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.2 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.3 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.4 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.5 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.6 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.7 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.8 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.9 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.10 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.11 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.12 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.13 SwEdition community

Akeneo ≫ Product Information Management Version 1.5.14 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.0 Update - SwEdition community

Akeneo ≫ Product Information Management Version 1.6.0 Update alpha1 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.0 Update alpha2 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.0 Update rc1 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.1 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.2 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.3 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.4 SwEdition community

Akeneo ≫ Product Information Management Version 1.6.5 SwEdition community

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.93%	0.89

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2

Patch

Third Party Advisory

Release Notes

https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes

Patch

Third Party Advisory

Release Notes

https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2

Patch

Third Party Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-1000009

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1000009

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1000009

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-1000009