Red Hat Security Advisory

RHSA-2016:1634

CFME 5.6.1 security, bug fix, and enhancement update

Released 2016-08-18 · Red Hat rating Important · View on Red Hat →

Fixed in

CloudForms Management Engine 5.6 cfme-5.6.1.2-1.el7cf, cfme-appliance-5.6.1.2-1.el7cf, cfme-gemset-5.6.1.2-1.el7cf +2

TI-2016-04662 CVE-2016-5383 · GHSA-8vfr-r3m3-8998

MEDIUM 43

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02626 Published 2016-08-26 Fixed CWE-284