CVE-2017-11610

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11610
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11610.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11610
Aliases
Downstream
Published
2017-08-23T14:29:00.237Z
Modified
2026-05-28T04:03:41.213344505Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "8.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "last_affected": "24"
                },
                {
                    "last_affected": "25"
                },
                {
                    "last_affected": "26"
                }
            ],
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "4.5"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:cloudforms",
            "cpes": [
                "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/supervisor/supervisor

Affected ranges

Type
GIT
Repo
https://github.com/supervisor/supervisor
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b0cb0980d97b475d8e08801e7b64a9d219cb7eb0
Last affected
fa45f8f6faff996e9f68f8ebda0ed52b9a47f0b4
Last affected
62dd947625825178ffe2c113a4711a65cf99d36f
Last affected
7786119a97f02b9df87031563523ee878c55fc5b
Last affected
f067ed44b726b754d23f97fd1277a23292382f82
Last affected
5fcab2c8349f5e0be664f2b29daff975bc889255
Last affected
b7e4ed8510c10b9dbdeb1c94c1890618f67df19f
Last affected
26cc505f5eb5b0d323cbcf4a9ec05c76cf7c0630
Last affected
8286f01c9c5324c07e9098bda279a49144e5c2d7
Last affected
4142109d2d7dc1dd4153831f7c82d1131dac31ee
Last affected
504e2fba3bf527ddd6969d7764fc624486d8fed6
Last affected
42bfa5537996b2a40511ef8a5a9f7e8ec3118c98
Database specific 
{
    "cpe": [
        "cpe:2.3:a:supervisord:supervisor:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.1.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:supervisord:supervisor:3.3.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "last_affected": "3.1.1"
        },
        {
            "last_affected": "3.1.2"
        },
        {
            "last_affected": "3.1.3"
        },
        {
            "last_affected": "3.2.0"
        },
        {
            "last_affected": "3.2.1"
        },
        {
            "last_affected": "3.2.2"
        },
        {
            "last_affected": "3.2.3"
        },
        {
            "last_affected": "3.3.0"
        },
        {
            "last_affected": "3.3.1"
        },
        {
            "last_affected": "3.3.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

3.*
3.0
3.0a10
3.0a11
3.0a12
3.0b1
3.0b2
3.1.0
3.1.1
3.1.2
3.1.3
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11610.json"