CVE-2012-5646: Input Validation
Michael Scherer (mscherer) reports:
the file https://github.com/openshift/origin-server/blob/master/node-util/www/html/restorer.php used to restore application after being idle fails to safely handle user supplied data that is later used on the command line.
Other sources
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATHINFO.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5646?
CVE-2012-5646 has been assigned a medium severity level, indicating it requires attention but is not critical.
How do I fix CVE-2012-5646?
To fix CVE-2012-5646, update to Red Hat OpenShift 1.0.5 or a later version.
What are the affected software versions for CVE-2012-5646?
CVE-2012-5646 affects Red Hat OpenShift 1.0 and all versions of OpenShift Origin up to and including 1.0.5.
Is CVE-2012-5646 a remote code execution vulnerability?
No, CVE-2012-5646 is not classified as a remote code execution vulnerability.
When was CVE-2012-5646 reported?
CVE-2012-5646 was reported in 2012.