CVE:CVE-2011-4192
CNNVD:CNNVD-201204-251
Novell SUSE Studio Onsite和SUSE Studio Extension for System z都是美国Novell公司的一套用于在Web浏览器中构建和测试软件应用程序的Web应用程序。
SUSE Studio Onsite 1.2版本和SUSE Studio Extension for System z 1.2版本中使用的kiwi 4.85及之前的版本存在安全漏洞。攻击者可利用该漏洞执行任意命令。
solution:Upgrade suse kiwi to a higher version than 4.85,and avoid the version (,4.85]; Upgrade suse studio_extension_for_system_z to a higher version than 1.2,and avoid the version 1.2; Upgrade suse studio_onsite to a higher version than 1.2,and avoid the version 1.2