CVEvulnerability

CVE-2017-1000009

9.8 CRITICAL Published 2017-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-78

Description

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.

Affected configurations

• akeneo product information management 1.4.0 • akeneo product information management 1.4.1 • akeneo product information management 1.4.2 • akeneo product information management 1.4.3 • akeneo product information management 1.4.4 • akeneo product information management 1.4.5 • akeneo product information management 1.4.6 • akeneo product information management 1.4.7 • akeneo product information management 1.4.8 • akeneo product information management 1.4.9 • akeneo product information management 1.4.10 • akeneo product information management 1.4.11 • akeneo product information management 1.4.12 • akeneo product information management 1.4.13 • akeneo product information management 1.4.14 • akeneo product information management 1.4.15 • akeneo product information management 1.4.16 • akeneo product information management 1.4.17 • akeneo product information management 1.4.18 • akeneo product information management 1.4.19 • akeneo product information management 1.4.20 • akeneo product information management 1.4.21 • akeneo product information management 1.4.22 • akeneo product information management 1.4.23 • akeneo product information management 1.4.24 • akeneo product information management 1.4.25 • akeneo product information management 1.4.26 • akeneo product information management 1.4.27 • akeneo product information management 1.5.0 • akeneo product information management 1.5.1 • akeneo product information management 1.5.2 • akeneo product information management 1.5.3 • akeneo product information management 1.5.4 • akeneo product information management 1.5.5 • akeneo product information management 1.5.6 • akeneo product information management 1.5.7 • akeneo product information management 1.5.8 • akeneo product information management 1.5.9 • akeneo product information management 1.5.10 • akeneo product information management 1.5.11 • akeneo product information management 1.5.12 • akeneo product information management 1.5.13 • akeneo product information management 1.5.14 • akeneo product information management 1.6.0 • akeneo product information management 1.6.1 • akeneo product information management 1.6.2 • akeneo product information management 1.6.3 • akeneo product information management 1.6.4 • akeneo product information management 1.6.5

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References