CVE-2011-4213: High severity google app engine python sdk vulnerability
The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a fileblobstorage.os reference within the code parameter to ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4213?
CVE-2011-4213 is considered a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2011-4213?
To fix CVE-2011-4213, upgrade the Google App Engine Python SDK to version 1.5.4 or later.
What impact does CVE-2011-4213 have on my application?
CVE-2011-4213 allows local users to bypass access restrictions, potentially leading to unauthorized command execution in your application.
Who is affected by CVE-2011-4213?
CVE-2011-4213 affects users of the Google App Engine Python SDK versions prior to 1.5.4.
Is CVE-2011-4213 related to file permissions?
Yes, CVE-2011-4213 allows exploitation through a file_blob_storage.os reference, which relates to file access and permissions.