RCE in Enomaly Elastic Computing Platform

CVE-2009-0390

Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

Enomaly Elastic_computing_platform — versions 2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)