Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse ioFog

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    iofogctl command injection via Controller provisioning response

    In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported releas…