VULNERABILITY INTELLIGENCE

CVE-2012-4406

CVSS score9.8 CRITICAL
EPSS probability6.57%
CISA KEVNot currently listed
Published2012-10-22
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references