Red Hat Security Advisory

RHSA-2014:1390

luci security, bug fix, and enhancement update

Released 2014-10-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability (v. 6) luci-0.26.0-63.el6
Red Hat Enterprise Linux Resilient Storage (v. 6) luci-0.26.0-63.el6

Fixes 1 record

TI-2014-02916 CVE-2014-3593 · GHSA-v57g-j4xw-h383

Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with…

LOW 30

Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01363 Published 2014-10-15 Fixed CWE-94