CVE-2014-0156: OS Command Injection
Published Jun 30, 2022
·Updated
Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.
Affected Software
1 affected component
ManageIQ Awesomespawn>=1.2.0<1.5.0
Remediation
Event History
Jun 30, 2022
CVE Published
via MITRE·08:36 PM
Data Sourced
via MITRE·08:36 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-0156?
CVE-2014-0156 is classified as a high severity vulnerability due to the potential for arbitrary command execution.
2
How do I fix CVE-2014-0156?
To fix CVE-2014-0156, upgrade Awesome spawn to version 1.5.0 or later.
3
What type of vulnerability is CVE-2014-0156?
CVE-2014-0156 is an OS command injection vulnerability.
4
Who is affected by CVE-2014-0156?
CVE-2014-0156 affects users of Awesome spawn versions between 1.2.0 and 1.5.0.
5
What can an attacker do with CVE-2014-0156?
An attacker can execute arbitrary commands by providing malicious input as arguments to Awesome spawn.