CVE-2016-7040 in CloudForms Management Engine情報

要約

〜によって MITRE

Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2016年08月23日

公開

2016年10月07日

モデレーション

承諾済み

エントリ

VDB-92507

CPE

準備完了

CWE

CWE-284 (確認済み)

CVSS

8.8 (NVD)

EPSS

0.00641

KEV

いいえ

アクティビティ

非常低い

セクター

Lawfirm, Finance, ...

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-7040
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-7040
CVE Details	https://www.cvedetails.com/cve/CVE-2016-7040/

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!