CVE-2015-5164 The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code....
HighCVSS 7.2
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pulpproject qpid | All versions | No fix listed |
References
- bugzilla.redhat.com issue-tracking third-party-advisory
- pulp.plan.io issue-tracking third-party-advisory