high8.8
CVE-2016-5402
A code injection flaw was found in the way capacity and utilization imported control files are processed.
Impact
A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Cloudforms | Version 4.1 |
| Redhat | Cloudforms Management Engine | Version 5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-2839.html
- http://www.securityfocus.com/bid/94612
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5402
- http://rhn.redhat.com/errata/RHSA-2016-2839.html
- http://www.securityfocus.com/bid/94612
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5402