CVEvulnerability
CVE-2017-1000009
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-07-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-78
Description
Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.
Affected configurations
• akeneo product information management 1.4.0
• akeneo product information management 1.4.1
• akeneo product information management 1.4.2
• akeneo product information management 1.4.3
• akeneo product information management 1.4.4
• akeneo product information management 1.4.5
• akeneo product information management 1.4.6
• akeneo product information management 1.4.7
• akeneo product information management 1.4.8
• akeneo product information management 1.4.9
• akeneo product information management 1.4.10
• akeneo product information management 1.4.11
• akeneo product information management 1.4.12
• akeneo product information management 1.4.13
• akeneo product information management 1.4.14
• akeneo product information management 1.4.15
• akeneo product information management 1.4.16
• akeneo product information management 1.4.17
• akeneo product information management 1.4.18
• akeneo product information management 1.4.19
• akeneo product information management 1.4.20
• akeneo product information management 1.4.21
• akeneo product information management 1.4.22
• akeneo product information management 1.4.23
• akeneo product information management 1.4.24
• akeneo product information management 1.4.25
• akeneo product information management 1.4.26
• akeneo product information management 1.4.27
• akeneo product information management 1.5.0
• akeneo product information management 1.5.1
• akeneo product information management 1.5.2
• akeneo product information management 1.5.3
• akeneo product information management 1.5.4
• akeneo product information management 1.5.5
• akeneo product information management 1.5.6
• akeneo product information management 1.5.7
• akeneo product information management 1.5.8
• akeneo product information management 1.5.9
• akeneo product information management 1.5.10
• akeneo product information management 1.5.11
• akeneo product information management 1.5.12
• akeneo product information management 1.5.13
• akeneo product information management 1.5.14
• akeneo product information management 1.6.0
• akeneo product information management 1.6.1
• akeneo product information management 1.6.2
• akeneo product information management 1.6.3
• akeneo product information management 1.6.4
• akeneo product information management 1.6.5
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2 Patch, Release Notes, Third Party Advisory
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes Patch, Release Notes, Third Party Advisory
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2 Patch, Release Notes, Third Party Advisory
- https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2 Patch, Release Notes, Third Party Advisory
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes Patch, Release Notes, Third Party Advisory
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2 Patch, Release Notes, Third Party Advisory