CVE Daily

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content o...

High CVSS 7.5

Overview

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.

CWE: N/A Published: 2012-12-31T11:50:27.890
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags