Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-34558 EUVD-2022-0401GHSA-4vq7-8699-4xgcPYSEC-2022-43136PYSEC-2022-43163PYSEC-2022-43174PYSEC-2026-523

WMAgent arbitrary code execution via a crafted dbs-client package

Published Jul 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Package: global-workqueue Package: reqmgr2 Package: reqmon Package: wmagent Ecosystem: PyPI

Description

WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI global-workqueue >= 1.4.1rc5, < 2.0.4 2.0.4 GHSA-4vq7-8699-4xgc
PyPI reqmgr2 >= 1.4.0rc2, < 2.0.4 2.0.4 GHSA-4vq7-8699-4xgc
PyPI reqmon >= 1.4.1rc5, < 2.0.4 2.0.4 GHSA-4vq7-8699-4xgc
PyPI wmagent >= 1.3.3rc1, < 2.0.4 2.0.4 GHSA-4vq7-8699-4xgc

References