Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:pagerduty:rundeck:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

OS Command Injection in Rundeck via CLIUtils

Authenticated users can execute arbitrary OS commands on Windows nodes in Rundeck versions prior to 6.2.0 by injecting shell metacharacters into job options.

Rundeck remote-code-execution command-injection vulnerability
1t 1c
high advisory

Authorization Bypass in Rundeck Project Archive Import

Rundeck versions through 6.2.1 contain an authorization vulnerability in the project archive import endpoint allowing low-privileged users to overwrite sensitive project configuration files.

Rundeck
1t 1c