{"cvss":0.0,"datePublished":"2018-02-01T00:00:00Z","dateUpdated":"2018-02-01T00:00:00Z","description":"OrientDB through 2.2.22 does not enforce privilege requirements during \"where\" or \"fetchplan\" or \"order by\" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.","dueDate":"","id":"CVE-2017-11467","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"orientdb","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"orientdb orientdb Improper Privilege Management","vendor":"orientdb"}