diff --git a/cves/2017/CVE-2017-11610.yaml b/cves/2017/CVE-2017-11610.yaml index c0cead3284..9c8eb3199c 100644 --- a/cves/2017/CVE-2017-11610.yaml +++ b/cves/2017/CVE-2017-11610.yaml @@ -1,10 +1,10 @@ id: CVE-2017-11610 info: - name: Supervisor XMLRPC Exec + name: XML-RPC Server - Remote Code Execution author: notnotnotveg severity: high - description: The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups. + description: The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisor namespace lookups. reference: - https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/exploit/linux/http/supervisor_xmlrpc_exec.md - https://nvd.nist.gov/vuln/detail/CVE-2017-11610 @@ -54,3 +54,5 @@ requests: - "" - "" condition: and + +# Enhanced by mp on 2022/06/09