Vulnerabilities > CVE-2022-46157 - Code Injection vulnerability in Akeneo Product Information Management

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

akeneo

CWE-94

NVD

Published: 2022-12-09

Updated: 2023-11-07

Summary

Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the versions aforementioned provides patched Apache HTTP server configuration file, for docker setup and in documentation sample, to fix this vulnerability. Community Edition users must change their Apache HTTP server configuration accordingly to be protected. The patch for Cloud Based Akeneo PIM Services customers has been applied since 30th October 2022. Users are advised to upgrade. Users unable to upgrade may Replace any reference to `<FilesMatch \.php$>` in their apache httpd configurations with: `<Location "/index.php">`.

Vulnerable Configurations

Part	Description	Count
Application	Akeneo Akeneo Product Information Management 6.0.0 Akeneo Product Information Management 6.0.1 Akeneo Product Information Management 6.0.2 Akeneo Product Information Management 6.0.3 Akeneo Product Information Management 6.0.4 Akeneo Product Information Management 6.0.5 Akeneo Product Information Management 6.0.6 Akeneo Product Information Management 6.0.7 Akeneo Product Information Management 6.0.8 Akeneo Product Information Management 6.0.9 Akeneo Product Information Management 6.0.10 Akeneo Product Information Management 6.0.11 Akeneo Product Information Management 6.0.12 Akeneo Product Information Management 6.0.13 Akeneo Product Information Management 6.0.14 Akeneo Product Information Management 6.0.15 Akeneo Product Information Management 6.0.16 Akeneo Product Information Management 6.0.17 Akeneo Product Information Management 6.0.18 Akeneo Product Information Management 6.0.19 Akeneo Product Information Management 6.0.20 Akeneo Product Information Management 6.0.21 Akeneo Product Information Management 6.0.22 Akeneo Product Information Management 6.0.23 Akeneo Product Information Management 6.0.24 Akeneo Product Information Management 6.0.25 Akeneo Product Information Management 6.0.26 Akeneo Product Information Management 6.0.27 Akeneo Product Information Management 6.0.28 Akeneo Product Information Management 6.0.29 Akeneo Product Information Management 6.0.30 Akeneo Product Information Management 6.0.31 Akeneo Product Information Management 6.0.32 Akeneo Product Information Management 6.0.33 Akeneo Product Information Management 6.0.34 Akeneo Product Information Management 6.0.35 Akeneo Product Information Management 6.0.36 Akeneo Product Information Management 6.0.37 Akeneo Product Information Management 6.0.38 Akeneo Product Information Management 6.0.39 Akeneo Product Information Management 6.0.40 Akeneo Product Information Management 6.0.41 Akeneo Product Information Management 6.0.42 Akeneo Product Information Management 6.0.43 Akeneo Product Information Management 6.0.44 Akeneo Product Information Management 6.0.45 Akeneo Product Information Management 6.0.46 Akeneo Product Information Management 6.0.47 Akeneo Product Information Management 6.0.48 Akeneo Product Information Management 6.0.49 Akeneo Product Information Management 6.0.50 Akeneo Product Information Management 6.0.51 Akeneo Product Information Management 6.0.52 Akeneo Product Information Management 1.4.0 Akeneo Product Information Management 1.4.1 Akeneo Product Information Management 1.4.2 Akeneo Product Information Management 1.4.3 Akeneo Product Information Management 1.4.4 Akeneo Product Information Management 1.4.5 Akeneo Product Information Management 1.4.6 Akeneo Product Information Management 1.4.7 Akeneo Product Information Management 1.4.8 Akeneo Product Information Management 1.4.9 Akeneo Product Information Management 1.4.10 Akeneo Product Information Management 1.4.11 Akeneo Product Information Management 1.4.12 Akeneo Product Information Management 1.4.13 Akeneo Product Information Management 1.4.14 Akeneo Product Information Management 1.4.15 Akeneo Product Information Management 1.4.16 Akeneo Product Information Management 1.4.17 Akeneo Product Information Management 1.4.18 Akeneo Product Information Management 1.4.19 Akeneo Product Information Management 1.4.20 Akeneo Product Information Management 1.4.21 Akeneo Product Information Management 1.4.22 Akeneo Product Information Management 1.4.23 Akeneo Product Information Management 1.4.24 Akeneo Product Information Management 1.4.25 Akeneo Product Information Management 1.4.26 Akeneo Product Information Management 1.4.27 Akeneo Product Information Management 1.5.0 Akeneo Product Information Management 1.5.1 Akeneo Product Information Management 1.5.2 Akeneo Product Information Management 1.5.3 Akeneo Product Information Management 1.5.4 Akeneo Product Information Management 1.5.5 Akeneo Product Information Management 1.5.6 Akeneo Product Information Management 1.5.7 Akeneo Product Information Management 1.5.8 Akeneo Product Information Management 1.5.9 Akeneo Product Information Management 1.5.10 Akeneo Product Information Management 1.5.11 Akeneo Product Information Management 1.5.12 Akeneo Product Information Management 1.5.13 Akeneo Product Information Management 1.5.14 Akeneo Product Information Management 1.6.0 Akeneo Product Information Management 1.6.1 Akeneo Product Information Management 1.6.2 Akeneo Product Information Management 1.6.3 Akeneo Product Information Management 1.6.4 Akeneo Product Information Management 1.6.5 Akeneo Product Information Management 1.6.6 Akeneo Product Information Management 1.6.7 Akeneo Product Information Management 1.6.8 Akeneo Product Information Management 1.6.9 Akeneo Product Information Management 1.6.10 Akeneo Product Information Management 1.6.11 Akeneo Product Information Management 1.6.12 Akeneo Product Information Management 1.6.13 Akeneo Product Information Management 1.6.14 Akeneo Product Information Management 1.6.15 Akeneo Product Information Management 1.6.16 Akeneo Product Information Management 1.6.17 Akeneo Product Information Management 1.6.18 Akeneo Product Information Management 1.6.19 Akeneo Product Information Management 1.6.20 Akeneo Product Information Management 1.6.21 Akeneo Product Information Management 1.6.22 Akeneo Product Information Management 1.6.23 Akeneo Product Information Management 1.7.0 Akeneo Product Information Management 1.7.1 Akeneo Product Information Management 1.7.2 Akeneo Product Information Management 1.7.3 Akeneo Product Information Management 1.7.4 Akeneo Product Information Management 1.7.5 Akeneo Product Information Management 1.7.6 Akeneo Product Information Management 1.7.7 Akeneo Product Information Management 1.7.8 Akeneo Product Information Management 1.7.9 Akeneo Product Information Management 1.7.10 Akeneo Product Information Management 1.7.11 Akeneo Product Information Management 1.7.12 Akeneo Product Information Management 1.7.13 Akeneo Product Information Management 1.7.14 Akeneo Product Information Management 1.7.15 Akeneo Product Information Management 1.7.16 Akeneo Product Information Management 1.7.17 Akeneo Product Information Management 1.7.18 Akeneo Product Information Management 1.7.19 Akeneo Product Information Management 1.7.20 Akeneo Product Information Management 1.7.21 Akeneo Product Information Management 1.7.22 Akeneo Product Information Management 1.7.23 Akeneo Product Information Management 1.7.24 Akeneo Product Information Management 1.7.25 Akeneo Product Information Management 1.7.26 Akeneo Product Information Management 1.7.27 Akeneo Product Information Management 1.7.28 Akeneo Product Information Management 1.7.29 Akeneo Product Information Management 1.7.30 Akeneo Product Information Management 1.7.31 Akeneo Product Information Management 1.7.32 Akeneo Product Information Management 1.7.33 Akeneo Product Information Management 1.7.34 Akeneo Product Information Management 1.7.35 Akeneo Product Information Management 1.7.36 Akeneo Product Information Management 1.7.37 Akeneo Product Information Management 1.7.38 Akeneo Product Information Management 1.7.39 Akeneo Product Information Management 1.7.40 Akeneo Product Information Management 1.7.41 Akeneo Product Information Management 2.0.0 Akeneo Product Information Management 2.0.1 Akeneo Product Information Management 2.0.2 Akeneo Product Information Management 2.0.3 Akeneo Product Information Management 2.0.4 Akeneo Product Information Management 2.0.5 Akeneo Product Information Management 2.0.6 Akeneo Product Information Management 2.0.7 Akeneo Product Information Management 2.0.8 Akeneo Product Information Management 2.0.9 Akeneo Product Information Management 2.0.10 Akeneo Product Information Management 2.0.11 Akeneo Product Information Management 2.0.12 Akeneo Product Information Management 2.0.13 Akeneo Product Information Management 2.0.14 Akeneo Product Information Management 2.0.15 Akeneo Product Information Management 2.0.16 Akeneo Product Information Management 2.0.17 Akeneo Product Information Management 2.0.18 Akeneo Product Information Management 2.0.19 Akeneo Product Information Management 2.0.20 Akeneo Product Information Management 2.0.21 Akeneo Product Information Management 2.0.22 Akeneo Product Information Management 2.0.23 Akeneo Product Information Management 2.0.24 Akeneo Product Information Management 2.0.25 Akeneo Product Information Management 2.0.26 Akeneo Product Information Management 2.0.27 Akeneo Product Information Management 2.0.28 Akeneo Product Information Management 2.0.29 Akeneo Product Information Management 2.0.30 Akeneo Product Information Management 2.0.31 Akeneo Product Information Management 2.0.32 Akeneo Product Information Management 2.0.33 Akeneo Product Information Management 2.0.34 Akeneo Product Information Management 2.0.35 Akeneo Product Information Management 2.0.36 Akeneo Product Information Management 2.0.37 Akeneo Product Information Management 2.0.38 Akeneo Product Information Management 2.0.39 Akeneo Product Information Management 2.0.40 Akeneo Product Information Management 2.0.41 Akeneo Product Information Management 2.0.42 Akeneo Product Information Management 2.0.43 Akeneo Product Information Management 2.0.44 Akeneo Product Information Management 2.0.45 Akeneo Product Information Management 2.0.46 Akeneo Product Information Management 2.0.47 Akeneo Product Information Management 2.0.48 Akeneo Product Information Management 2.0.49 Akeneo Product Information Management 2.0.50 Akeneo Product Information Management 2.0.51 Akeneo Product Information Management 2.0.52 Akeneo Product Information Management 2.1.0 Akeneo Product Information Management 2.1.1 Akeneo Product Information Management 2.1.2 Akeneo Product Information Management 2.1.3 Akeneo Product Information Management 2.1.4 Akeneo Product Information Management 2.1.5 Akeneo Product Information Management 2.1.6 Akeneo Product Information Management 2.1.7 Akeneo Product Information Management 2.1.8 Akeneo Product Information Management 2.1.9 Akeneo Product Information Management 2.2.0 Akeneo Product Information Management 2.2.1 Akeneo Product Information Management 2.2.2 Akeneo Product Information Management 2.2.3 Akeneo Product Information Management 2.2.4 Akeneo Product Information Management 2.2.5 Akeneo Product Information Management 2.2.6 Akeneo Product Information Management 2.2.7 Akeneo Product Information Management 2.2.8 Akeneo Product Information Management 2.2.9 Akeneo Product Information Management 2.2.10 Akeneo Product Information Management 2.2.11 Akeneo Product Information Management 2.2.12 Akeneo Product Information Management 2.3.0 Akeneo Product Information Management 2.3.1 Akeneo Product Information Management 2.3.2 Akeneo Product Information Management 2.3.3 Akeneo Product Information Management 2.3.4 Akeneo Product Information Management 2.3.5 Akeneo Product Information Management 2.3.6 Akeneo Product Information Management 2.3.7 Akeneo Product Information Management 2.3.8 Akeneo Product Information Management 2.3.9 Akeneo Product Information Management 2.3.10 Akeneo Product Information Management 2.3.11 Akeneo Product Information Management 2.3.12 Akeneo Product Information Management 2.3.13 Akeneo Product Information Management 2.3.14 Akeneo Product Information Management 2.3.15 Akeneo Product Information Management 2.3.16 Akeneo Product Information Management 2.3.17 Akeneo Product Information Management 2.3.18 Akeneo Product Information Management 2.3.19 Akeneo Product Information Management 2.3.20 Akeneo Product Information Management 2.3.21 Akeneo Product Information Management 2.3.22 Akeneo Product Information Management 2.3.23 Akeneo Product Information Management 2.3.24 Akeneo Product Information Management 2.3.25 Akeneo Product Information Management 2.3.26 Akeneo Product Information Management 2.3.27 Akeneo Product Information Management 2.3.28 Akeneo Product Information Management 2.3.29 Akeneo Product Information Management 2.3.30 Akeneo Product Information Management 2.3.31 Akeneo Product Information Management 2.3.32 Akeneo Product Information Management 2.3.33 Akeneo Product Information Management 2.3.34 Akeneo Product Information Management 2.3.35 Akeneo Product Information Management 2.3.36 Akeneo Product Information Management 2.3.37 Akeneo Product Information Management 2.3.38 Akeneo Product Information Management 2.3.39 Akeneo Product Information Management 2.3.40 Akeneo Product Information Management 2.3.41 Akeneo Product Information Management 2.3.42 Akeneo Product Information Management 2.3.43 Akeneo Product Information Management 2.3.44 Akeneo Product Information Management 2.3.45 Akeneo Product Information Management 2.3.46 Akeneo Product Information Management 2.3.47 Akeneo Product Information Management 2.3.48 Akeneo Product Information Management 2.3.49 Akeneo Product Information Management 2.3.50 Akeneo Product Information Management 2.3.51 Akeneo Product Information Management 2.3.52 Akeneo Product Information Management 2.3.53 Akeneo Product Information Management 2.3.54 Akeneo Product Information Management 2.3.55 Akeneo Product Information Management 2.3.56 Akeneo Product Information Management 2.3.57 Akeneo Product Information Management 2.3.58 Akeneo Product Information Management 2.3.59 Akeneo Product Information Management 2.3.60 Akeneo Product Information Management 2.3.61 Akeneo Product Information Management 2.3.62 Akeneo Product Information Management 2.3.63 Akeneo Product Information Management 2.3.64 Akeneo Product Information Management 2.3.65 Akeneo Product Information Management 2.3.66 Akeneo Product Information Management 2.3.67 Akeneo Product Information Management 2.3.68 Akeneo Product Information Management 2.3.69 Akeneo Product Information Management 2.3.70 Akeneo Product Information Management 2.3.71 Akeneo Product Information Management 2.3.72 Akeneo Product Information Management 2.3.73 Akeneo Product Information Management 2.3.74 Akeneo Product Information Management 2.3.75 Akeneo Product Information Management 2.3.76 Akeneo Product Information Management 2.3.77 Akeneo Product Information Management 2.3.78 Akeneo Product Information Management 3.0.0 Akeneo Product Information Management 3.0.1 Akeneo Product Information Management 3.0.2 Akeneo Product Information Management 3.0.3 Akeneo Product Information Management 3.0.4 Akeneo Product Information Management 3.0.5 Akeneo Product Information Management 3.0.6 Akeneo Product Information Management 3.0.7 Akeneo Product Information Management 3.0.8 Akeneo Product Information Management 3.0.9 Akeneo Product Information Management 3.0.10 Akeneo Product Information Management 3.0.11 Akeneo Product Information Management 3.0.12 Akeneo Product Information Management 3.0.13 Akeneo Product Information Management 3.0.14 Akeneo Product Information Management 3.0.15 Akeneo Product Information Management 3.0.16 Akeneo Product Information Management 3.0.17 Akeneo Product Information Management 3.0.18 Akeneo Product Information Management 3.0.19 Akeneo Product Information Management 3.0.20 Akeneo Product Information Management 3.0.21 Akeneo Product Information Management 3.0.22 Akeneo Product Information Management 3.0.23 Akeneo Product Information Management 3.0.24 Akeneo Product Information Management 3.0.25 Akeneo Product Information Management 3.0.26 Akeneo Product Information Management 3.0.27 Akeneo Product Information Management 3.0.28 Akeneo Product Information Management 3.0.29 Akeneo Product Information Management 3.0.30 Akeneo Product Information Management 3.0.31 Akeneo Product Information Management 3.0.32 Akeneo Product Information Management 3.0.33 Akeneo Product Information Management 3.0.34 Akeneo Product Information Management 3.0.35 Akeneo Product Information Management 3.0.36 Akeneo Product Information Management 3.0.37 Akeneo Product Information Management 3.0.38 Akeneo Product Information Management 3.0.39 Akeneo Product Information Management 3.0.40 Akeneo Product Information Management 3.0.41 Akeneo Product Information Management 3.0.42 Akeneo Product Information Management 3.0.43 Akeneo Product Information Management 3.0.44 Akeneo Product Information Management 3.0.45 Akeneo Product Information Management 3.0.46 Akeneo Product Information Management 3.0.47 Akeneo Product Information Management 3.0.48 Akeneo Product Information Management 3.0.49 Akeneo Product Information Management 3.0.50 Akeneo Product Information Management 3.0.51 Akeneo Product Information Management 3.0.52 Akeneo Product Information Management 3.0.53 Akeneo Product Information Management 3.0.54 Akeneo Product Information Management 3.0.55 Akeneo Product Information Management 3.0.56 Akeneo Product Information Management 3.0.57 Akeneo Product Information Management 3.0.58 Akeneo Product Information Management 3.0.59 Akeneo Product Information Management 3.0.60 Akeneo Product Information Management 3.0.61 Akeneo Product Information Management 3.0.62 Akeneo Product Information Management 3.0.63 Akeneo Product Information Management 3.0.64 Akeneo Product Information Management 3.0.65 Akeneo Product Information Management 3.0.66 Akeneo Product Information Management 3.0.67 Akeneo Product Information Management 3.0.68 Akeneo Product Information Management 3.0.69 Akeneo Product Information Management 3.0.70 Akeneo Product Information Management 3.0.71 Akeneo Product Information Management 3.0.72 Akeneo Product Information Management 3.0.73 Akeneo Product Information Management 3.0.74 Akeneo Product Information Management 3.0.75 Akeneo Product Information Management 3.0.76 Akeneo Product Information Management 3.0.77 Akeneo Product Information Management 3.0.78 Akeneo Product Information Management 3.0.79 Akeneo Product Information Management 3.0.80 Akeneo Product Information Management 3.0.81 Akeneo Product Information Management 3.0.82 Akeneo Product Information Management 3.0.83 Akeneo Product Information Management 3.0.84 Akeneo Product Information Management 3.1.0 Akeneo Product Information Management 3.1.1 Akeneo Product Information Management 3.1.2 Akeneo Product Information Management 3.1.3 Akeneo Product Information Management 3.1.4 Akeneo Product Information Management 3.1.5 Akeneo Product Information Management 3.1.6 Akeneo Product Information Management 3.1.7 Akeneo Product Information Management 3.1.8 Akeneo Product Information Management 3.1.9 Akeneo Product Information Management 3.1.10 Akeneo Product Information Management 3.1.11 Akeneo Product Information Management 3.1.12 Akeneo Product Information Management 3.1.13 Akeneo Product Information Management 3.1.14 Akeneo Product Information Management 3.1.15 Akeneo Product Information Management 3.1.16 Akeneo Product Information Management 3.1.17 Akeneo Product Information Management 3.1.18 Akeneo Product Information Management 3.2.0 Akeneo Product Information Management 3.2.1 Akeneo Product Information Management 3.2.2 Akeneo Product Information Management 3.2.3 Akeneo Product Information Management 3.2.4 Akeneo Product Information Management 3.2.5 Akeneo Product Information Management 3.2.6 Akeneo Product Information Management 3.2.7 Akeneo Product Information Management 3.2.8 Akeneo Product Information Management 3.2.9 Akeneo Product Information Management 3.2.10 Akeneo Product Information Management 3.2.11 Akeneo Product Information Management 3.2.12 Akeneo Product Information Management 3.2.13 Akeneo Product Information Management 3.2.14 Akeneo Product Information Management 3.2.15 Akeneo Product Information Management 3.2.16 Akeneo Product Information Management 3.2.17 Akeneo Product Information Management 3.2.18 Akeneo Product Information Management 3.2.19 Akeneo Product Information Management 3.2.20 Akeneo Product Information Management 3.2.21 Akeneo Product Information Management 3.2.22 Akeneo Product Information Management 3.2.23 Akeneo Product Information Management 3.2.24 Akeneo Product Information Management 3.2.25 Akeneo Product Information Management 3.2.26 Akeneo Product Information Management 3.2.27 Akeneo Product Information Management 3.2.28 Akeneo Product Information Management 3.2.29 Akeneo Product Information Management 3.2.30 Akeneo Product Information Management 3.2.31 Akeneo Product Information Management 3.2.32 Akeneo Product Information Management 3.2.33 Akeneo Product Information Management 3.2.34 Akeneo Product Information Management 3.2.35 Akeneo Product Information Management 3.2.36 Akeneo Product Information Management 3.2.37 Akeneo Product Information Management 3.2.38 Akeneo Product Information Management 3.2.39 Akeneo Product Information Management 3.2.40 Akeneo Product Information Management 3.2.41 Akeneo Product Information Management 3.2.42 Akeneo Product Information Management 3.2.43 Akeneo Product Information Management 3.2.44 Akeneo Product Information Management 3.2.45 Akeneo Product Information Management 3.2.46 Akeneo Product Information Management 3.2.47 Akeneo Product Information Management 3.2.48 Akeneo Product Information Management 3.2.49 Akeneo Product Information Management 3.2.50 Akeneo Product Information Management 3.2.51 Akeneo Product Information Management 3.2.52 Akeneo Product Information Management 3.2.53 Akeneo Product Information Management 3.2.54 Akeneo Product Information Management 3.2.55 Akeneo Product Information Management 3.2.56 Akeneo Product Information Management 3.2.57 Akeneo Product Information Management 3.2.58 Akeneo Product Information Management 3.2.59 Akeneo Product Information Management 3.2.60 Akeneo Product Information Management 3.2.61 Akeneo Product Information Management 3.2.62 Akeneo Product Information Management 3.2.63 Akeneo Product Information Management 3.2.64 Akeneo Product Information Management 3.2.65 Akeneo Product Information Management 3.2.66 Akeneo Product Information Management 3.2.67 Akeneo Product Information Management 3.2.68 Akeneo Product Information Management 3.2.69 Akeneo Product Information Management 3.2.70 Akeneo Product Information Management 3.2.71 Akeneo Product Information Management 3.2.72 Akeneo Product Information Management 3.2.73 Akeneo Product Information Management 3.2.74 Akeneo Product Information Management 3.2.75 Akeneo Product Information Management 3.2.76 Akeneo Product Information Management 3.2.77 Akeneo Product Information Management 3.2.78 Akeneo Product Information Management 3.2.79 Akeneo Product Information Management 3.2.80 Akeneo Product Information Management 3.2.81 Akeneo Product Information Management 3.2.82 Akeneo Product Information Management 3.2.83 Akeneo Product Information Management 3.2.84 Akeneo Product Information Management 4.0.0 Akeneo Product Information Management 4.0.1 Akeneo Product Information Management 4.0.2 Akeneo Product Information Management 4.0.3 Akeneo Product Information Management 4.0.4 Akeneo Product Information Management 4.0.5 Akeneo Product Information Management 4.0.6 Akeneo Product Information Management 4.0.7 Akeneo Product Information Management 4.0.8 Akeneo Product Information Management 4.0.9 Akeneo Product Information Management 4.0.10 Akeneo Product Information Management 4.0.11 Akeneo Product Information Management 4.0.12 Akeneo Product Information Management 4.0.13 Akeneo Product Information Management 4.0.14 Akeneo Product Information Management 4.0.15 Akeneo Product Information Management 4.0.16 Akeneo Product Information Management 4.0.17 Akeneo Product Information Management 4.0.18 Akeneo Product Information Management 4.0.19 Akeneo Product Information Management 4.0.20 Akeneo Product Information Management 4.0.21 Akeneo Product Information Management 4.0.22 Akeneo Product Information Management 4.0.23 Akeneo Product Information Management 4.0.24 Akeneo Product Information Management 4.0.25 Akeneo Product Information Management 4.0.26 Akeneo Product Information Management 4.0.27 Akeneo Product Information Management 4.0.28 Akeneo Product Information Management 4.0.29 Akeneo Product Information Management 4.0.30 Akeneo Product Information Management 4.0.31 Akeneo Product Information Management 4.0.32 Akeneo Product Information Management 4.0.33 Akeneo Product Information Management 4.0.34 Akeneo Product Information Management 4.0.35 Akeneo Product Information Management 4.0.36 Akeneo Product Information Management 4.0.37 Akeneo Product Information Management 4.0.38 Akeneo Product Information Management 4.0.39 Akeneo Product Information Management 4.0.40 Akeneo Product Information Management 4.0.41 Akeneo Product Information Management 4.0.42 Akeneo Product Information Management 4.0.43 Akeneo Product Information Management 4.0.44 Akeneo Product Information Management 4.0.45 Akeneo Product Information Management 4.0.46 Akeneo Product Information Management 4.0.47 Akeneo Product Information Management 4.0.48 Akeneo Product Information Management 4.0.49 Akeneo Product Information Management 4.0.50 Akeneo Product Information Management 4.0.51 Akeneo Product Information Management 4.0.52 Akeneo Product Information Management 4.0.53 Akeneo Product Information Management 4.0.54 Akeneo Product Information Management 4.0.55 Akeneo Product Information Management 4.0.56 Akeneo Product Information Management 4.0.57 Akeneo Product Information Management 4.0.58 Akeneo Product Information Management 4.0.59 Akeneo Product Information Management 4.0.60 Akeneo Product Information Management 4.0.61 Akeneo Product Information Management 4.0.62 Akeneo Product Information Management 4.0.63 Akeneo Product Information Management 4.0.64 Akeneo Product Information Management 4.0.65 Akeneo Product Information Management 4.0.66 Akeneo Product Information Management 4.0.67 Akeneo Product Information Management 4.0.68 Akeneo Product Information Management 4.0.69 Akeneo Product Information Management 4.0.70 Akeneo Product Information Management 4.0.71 Akeneo Product Information Management 4.0.72 Akeneo Product Information Management 4.0.73 Akeneo Product Information Management 4.0.74 Akeneo Product Information Management 4.0.75 Akeneo Product Information Management 4.0.76 Akeneo Product Information Management 4.0.77 Akeneo Product Information Management 4.0.78 Akeneo Product Information Management 4.0.79 Akeneo Product Information Management 4.0.80 Akeneo Product Information Management 4.0.81 Akeneo Product Information Management 4.0.82 Akeneo Product Information Management 4.0.83 Akeneo Product Information Management 4.0.84 Akeneo Product Information Management 4.0.85 Akeneo Product Information Management 4.0.86 Akeneo Product Information Management 4.0.87 Akeneo Product Information Management 4.0.88 Akeneo Product Information Management 4.0.89 Akeneo Product Information Management 4.0.90 Akeneo Product Information Management 4.0.91 Akeneo Product Information Management 4.0.92 Akeneo Product Information Management 4.0.93 Akeneo Product Information Management 4.0.94 Akeneo Product Information Management 4.0.95 Akeneo Product Information Management 4.0.96 Akeneo Product Information Management 4.0.97 Akeneo Product Information Management 4.0.98 Akeneo Product Information Management 4.0.99 Akeneo Product Information Management 4.0.100 Akeneo Product Information Management 4.0.101 Akeneo Product Information Management 4.0.102 Akeneo Product Information Management 4.0.103 Akeneo Product Information Management 4.0.104 Akeneo Product Information Management 4.0.105 Akeneo Product Information Management 4.0.106 Akeneo Product Information Management 4.0.107 Akeneo Product Information Management 4.0.108 Akeneo Product Information Management 4.0.109 Akeneo Product Information Management 4.0.110 Akeneo Product Information Management 4.0.111 Akeneo Product Information Management 4.0.112 Akeneo Product Information Management 4.0.113 Akeneo Product Information Management 4.0.114 Akeneo Product Information Management 4.0.115 Akeneo Product Information Management 4.0.116 Akeneo Product Information Management 4.0.117 Akeneo Product Information Management 4.0.118 Akeneo Product Information Management 4.0.119 Akeneo Product Information Management 4.0.120 Akeneo Product Information Management 4.0.121 Akeneo Product Information Management 4.0.122 Akeneo Product Information Management 4.0.123 Akeneo Product Information Management 4.0.124 Akeneo Product Information Management 4.0.125 Akeneo Product Information Management 4.0.126 Akeneo Product Information Management 5.0.0 Akeneo Product Information Management 5.0.1 Akeneo Product Information Management 5.0.2 Akeneo Product Information Management 5.0.3 Akeneo Product Information Management 5.0.4 Akeneo Product Information Management 5.0.5 Akeneo Product Information Management 5.0.6 Akeneo Product Information Management 5.0.7 Akeneo Product Information Management 5.0.8 Akeneo Product Information Management 5.0.9 Akeneo Product Information Management 5.0.10 Akeneo Product Information Management 5.0.11 Akeneo Product Information Management 5.0.12 Akeneo Product Information Management 5.0.13 Akeneo Product Information Management 5.0.14 Akeneo Product Information Management 5.0.15 Akeneo Product Information Management 5.0.16 Akeneo Product Information Management 5.0.17 Akeneo Product Information Management 5.0.18 Akeneo Product Information Management 5.0.19 Akeneo Product Information Management 5.0.20 Akeneo Product Information Management 5.0.21 Akeneo Product Information Management 5.0.22 Akeneo Product Information Management 5.0.23 Akeneo Product Information Management 5.0.24 Akeneo Product Information Management 5.0.25 Akeneo Product Information Management 5.0.26 Akeneo Product Information Management 5.0.27 Akeneo Product Information Management 5.0.28 Akeneo Product Information Management 5.0.29 Akeneo Product Information Management 5.0.30 Akeneo Product Information Management 5.0.31 Akeneo Product Information Management 5.0.32 Akeneo Product Information Management 5.0.33 Akeneo Product Information Management 5.0.34 Akeneo Product Information Management 5.0.35 Akeneo Product Information Management 5.0.36 Akeneo Product Information Management 5.0.37 Akeneo Product Information Management 5.0.38 Akeneo Product Information Management 5.0.39 Akeneo Product Information Management 5.0.40 Akeneo Product Information Management 5.0.41 Akeneo Product Information Management 5.0.42 Akeneo Product Information Management 5.0.43 Akeneo Product Information Management 5.0.44 Akeneo Product Information Management 5.0.45 Akeneo Product Information Management 5.0.46 Akeneo Product Information Management 5.0.47 Akeneo Product Information Management 5.0.48 Akeneo Product Information Management 5.0.49 Akeneo Product Information Management 5.0.50 Akeneo Product Information Management 5.0.51 Akeneo Product Information Management 5.0.52 Akeneo Product Information Management 5.0.53 Akeneo Product Information Management 5.0.54 Akeneo Product Information Management 5.0.55 Akeneo Product Information Management 5.0.56 Akeneo Product Information Management 5.0.57 Akeneo Product Information Management 5.0.58 Akeneo Product Information Management 5.0.59 Akeneo Product Information Management 5.0.60 Akeneo Product Information Management 5.0.61 Akeneo Product Information Management 5.0.62 Akeneo Product Information Management 5.0.63 Akeneo Product Information Management 5.0.64 Akeneo Product Information Management 5.0.65 Akeneo Product Information Management 5.0.66 Akeneo Product Information Management 5.0.67 Akeneo Product Information Management 5.0.68 Akeneo Product Information Management 5.0.69 Akeneo Product Information Management 5.0.70 Akeneo Product Information Management 5.0.71 Akeneo Product Information Management 5.0.72 Akeneo Product Information Management 5.0.73 Akeneo Product Information Management 5.0.74 Akeneo Product Information Management 5.0.75 Akeneo Product Information Management 5.0.76 Akeneo Product Information Management 5.0.77 Akeneo Product Information Management 5.0.78 Akeneo Product Information Management 5.0.79 Akeneo Product Information Management 5.0.80 Akeneo Product Information Management 5.0.81 Akeneo Product Information Management 5.0.82 Akeneo Product Information Management 5.0.83 Akeneo Product Information Management 5.0.84 Akeneo Product Information Management 5.0.85 Akeneo Product Information Management 5.0.86 Akeneo Product Information Management 5.0.87 Akeneo Product Information Management 5.0.88 Akeneo Product Information Management 5.0.89 Akeneo Product Information Management 5.0.90 Akeneo Product Information Management 5.0.91 Akeneo Product Information Management 5.0.92 Akeneo Product Information Management 5.0.93 Akeneo Product Information Management 5.0.94 Akeneo Product Information Management 5.0.95 Akeneo Product Information Management 5.0.96 Akeneo Product Information Management 5.0.97 Akeneo Product Information Management 5.0.98 Akeneo Product Information Management 5.0.99 Akeneo Product Information Management 5.0.100 Akeneo Product Information Management 5.0.101 Akeneo Product Information Management 5.0.102 Akeneo Product Information Management 5.0.103 Akeneo Product Information Management 5.0.104 Akeneo Product Information Management 5.0.105 Akeneo Product Information Management 5.0.106 Akeneo Product Information Management 5.0.107 Akeneo Product Information Management 5.0.108 Akeneo Product Information Management 5.0.109 Akeneo Product Information Management 5.0.110 Akeneo Product Information Management 5.0.111 Akeneo Product Information Management 5.0.112 Akeneo Product Information Management 5.0.113 Akeneo Product Information Management 5.0.114 Akeneo Product Information Management 5.0.115 Akeneo Product Information Management 5.0.116 Akeneo Product Information Management 5.0.117 Akeneo Product Information Management 5.0.118	780

Common Weakness Enumeration (CWE)

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Leverage Executable Code in Non-Executable Files
An attack of this type exploits a system's trust in configuration and resource files, when the executable loads the resource (such as an image file or configuration file) the attacker has modified the file to either execute malicious code directly or manipulate the target process (e.g. application server) to execute based on the malicious configuration parameters. Since systems are increasingly interrelated mashing up resources from local and remote sources the possibility of this attack occurring is high. The attack can be directed at a client system, such as causing buffer overrun through loading seemingly benign image files, as in Microsoft Security Bulletin MS04-028 where specially crafted JPEG files could cause a buffer overrun once loaded into the browser. Another example targets clients reading pdf files. In this case the attacker simply appends javascript to the end of a legitimate url for a pdf (http://www.gnucitizen.org/blog/danger-danger-danger/) http://path/to/pdf/file.pdf#whatever_name_you_want=javascript:your_code_here The client assumes that they are reading a pdf, but the attacker has modified the resource and loaded executable javascript into the client's browser process. The attack can also target server processes. The attacker edits the resource or configuration file, for example a web.xml file used to configure security permissions for a J2EE app server, adding role name "public" grants all users with the public role the ability to use the administration functionality. The server trusts its configuration file to be correct, but when they are manipulated, the attacker gains full control.
Manipulating User-Controlled Variables
This attack targets user controlled variables (DEBUG=1, PHP Globals, and So Forth). An attacker can override environment variables leveraging user-supplied, untrusted query variables directly used on the application server without any data sanitization. In extreme cases, the attacker can change variables controlling the business logic of the application. For instance, in languages like PHP, a number of poorly set default configurations may allow the user to override variables.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References