CPE Details
Red Hat CloudForms Management Engine 5.11
5.11
2020-06-25
17h36 +00:00
17h36 +00:00
2020-06-25
17h36 +00:00
17h36 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:redhat:cloudforms_management_engine:5.11:*:*:*:*:*:*:*
Informations
Vendor
redhatProduct
cloudforms_management_engineVersion
5.11Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server. | 9.1 |
Critique |
||
| A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root. | 8 |
Haute |
