CVE-2015-5164
HIGHPulpproject Qpid - Insecure Deserialization
Title source: ruleDescription
The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.
Scores
CVSS v3
7.2
EPSS
0.0170
EPSS Percentile
82.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
draft
Affected Products (1)
pulpproject/qpid
Timeline
Published
Oct 18, 2017
Tracked Since
Feb 18, 2026