Read the docs
TI-2020-11195 Aliases CVE-2020-14324

OS command injection in CloudForms

Priority MEDIUM 44CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-78.

Summary

A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.

Why it matters now

EPSS 0.02515 84th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—CloudFormscfme 5.11.7.0—No fix listedCNA
  • CloudForms Vendor— Affected cfme 5.11.7.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*before 5.11.7.0VulnerableRed Hat
  • cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:* Versions before 5.11.7.0 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2020:3574 Released 2020-08-27 · Red Hat rating Critical
    CloudForms 4.7.16 security, bug fix and enhancement update
    • CloudForms Management Engine 5.10 cfme-5.10.16.0-1.el7cf, cfme-appliance-5.10.16.0-1.el7cf, cfme-appliance-common-5.10.16.0-1.el7cf +2
  • RHSA-2020:3358 Released 2020-08-06 · Red Hat rating Critical
    CloudForms 5.0.7 bug fix and enhancement update
    • CloudForms Management Engine 5.11 cfme-5.11.7.3-1.el8cf, cfme-gemset-5.11.7.3-1.el8cf

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5.10Fixed RHSA-2020:3574
CloudForms Management Engine 5.11Fixed RHSA-2020:3358
Not affected: 2 products
  • CloudForms Management Engine 5.10
  • CloudForms Management Engine 5.11

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-14324

References

Advisory 2

  • TI-2013-01839 Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms… CVSS 2.0HIGH 9.4
  • TI-2013-01821 SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0… CVSS 2.0HIGH 7.5
  • TI-2016-04680 Code injection in [UNKNOWN] cfme CVSS 3.0HIGH 8.8
  • TI-2019-11098 Improper input validation in [UNKNOWN] CloudForms CVSS 3.1HIGH 8.0
  • TI-2016-06078 Improper authorization in Red Hat CFME CVSS 3.0HIGH 8.8
  • TI-2016-06051 Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions… CVSS 3.0HIGH 8.8
See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences