CVE-2016-5383
Fixed in a distro release EPSS 3%
The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."
Products: redhat cloudforms
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat cloudforms managementengine 5.6 | cfme | 0:5.6.1.2-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | cfme-appliance | 0:5.6.1.2-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | cfme-appliance-debuginfo | 0:5.6.1.2-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | cfme-debuginfo | 0:5.6.1.2-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | cfme-gemset | 0:5.6.1.2-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | google-compute-engine | 0:2.0.0-1.el7cf |
| Red Hat cloudforms managementengine 5.6 | google-config | 0:2.0.0-1.el7cf |