Cloudanix VulnDB

CVE-2017-11610

High · 8.8

CVSS

8.8

EPSS

87.4%

Published

Aug 23, 2017

CISA due date

—

The record

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

Affected packages

Ecosystem Package Introduced Fixed
PyPI supervisor 0 3.0.1
PyPI supervisor 3.1.0 3.1.4
PyPI supervisor 3.2.0 3.2.4
PyPI supervisor 3.3.0 3.3.3
Alpine:v3.10 supervisor 0 3.2.4-r0
Alpine:v3.11 supervisor 0 3.2.4-r0
Alpine:v3.12 supervisor 0 3.2.4-r0
Alpine:v3.13 supervisor 0 3.2.4-r0
Alpine:v3.14 supervisor 0 3.2.4-r0
Alpine:v3.15 supervisor 0 3.2.4-r0
Alpine:v3.16 supervisor 0 3.2.4-r0
Alpine:v3.17 supervisor 0 3.2.4-r0
Alpine:v3.18 supervisor 0 3.2.4-r0
Alpine:v3.19 supervisor 0 3.2.4-r0
Alpine:v3.20 supervisor 0 3.2.4-r0
Alpine:v3.21 supervisor 0 3.2.4-r0
Alpine:v3.22 supervisor 0 3.2.4-r0
Alpine:v3.3 supervisor 0 3.1.4-r0
Alpine:v3.4 supervisor 0 3.2.4-r0
Alpine:v3.5 supervisor 0 3.2.4-r0
Alpine:v3.6 supervisor 0 3.2.4-r0
Alpine:v3.7 supervisor 0 3.2.4-r0
Alpine:v3.8 supervisor 0 3.2.4-r0
Alpine:v3.9 supervisor 0 3.2.4-r0
Debian:11 supervisor 0 3.3.1-1.1
Debian:12 supervisor 0 3.3.1-1.1
Debian:13 supervisor 0 3.3.1-1.1
Debian:14 supervisor 0 3.3.1-1.1
Debian:7 supervisor 0 3.0a8-1.1+deb7u2
Debian:8 supervisor 0 3.0r1-1+deb8u1
Debian:9 supervisor 0 3.3.1-1+deb9u1
Mageia:5 supervisor 0 3.0.1-1.mga5
Mageia:6 supervisor 0 3.1.4-1.mga6
Red Hat:cloudforms_managementengine:5.8::el7 ansible-tower-server 0 0:3.1.5-1.el7at
Red Hat:cloudforms_managementengine:5.8::el7 ansible-tower-setup 0 0:3.1.5-1.el7at
Red Hat:cloudforms_managementengine:5.8::el7 cfme 0 0:5.8.2.3-1.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 cfme-appliance 0 0:5.8.2.3-1.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 cfme-appliance-debuginfo 0 0:5.8.2.3-1.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 cfme-debuginfo 0 0:5.8.2.3-1.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 cfme-gemset 0 0:5.8.2.3-1.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 rabbitmq-server 0 0:3.6.9-1.el7at
Red Hat:cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri 0 0:1.8.1-2.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-debuginfo 0 0:1.8.1-2.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-doc 0 0:1.8.1-2.el7cf
Red Hat:cloudforms_managementengine:5.8::el7 supervisor 0 0:3.1.4-1.el7
Ubuntu:14.04:LTS supervisor 0 3.0b2-1ubuntu0.1
Ubuntu:16.04:LTS supervisor 0 3.2.0-2ubuntu0.2
Ubuntu:18.04:LTS supervisor 0 3.3.1-1.1
pypi supervisor 3.1.0 No fix
pypi supervisor 3.2.0 No fix
pypi supervisor 3.3.0 No fix

Related vulnerabilities