| Package | Affected versions | Patched versions |
|---|---|---|
| ganeti | = 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.1.0 |
Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI) and allow (2) local users to execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command, related to "path sanitization errors."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free