CVE-2011-4192
16.04.2014, 18:37
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."Enginsight
| Vendor | Product | Version |
|---|---|---|
| suse | kiwi | 𝑥 ≤ 4.85 |
| suse | studio_extension_for_system_z | 1.2 |
| suse | studio_onsite | 1.2 |
𝑥
= Vulnerable software versions