CVE-2015-7544

Related Files

Red Hat Security Advisory 2016-0426-01

Posted Mar 10, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-0426-01 - The Red Hat Support plug-in for Red Hat Enterprise Virtualization offers seamless integrated access to Red Hat subscription services from the Red Hat Enterprise Virtualization administration portal. The plug-in provides automated functionality that enables quicker help, answers, and proactive services. It offers easy and instant access to Red Hat exclusive knowledge, resources, engagement, and diagnostic features. It was found that redhat-support-plugin-rhev passed a user-specified path and file name directly to the command line in the log viewer component. This could allow users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment.

tags | advisory, arbitrary

systems | linux, redhat

advisories | CVE-2015-7544

SHA-256 | ee4ebca79af75ca3b8925d38b181ea3e6b78604be736b6bd0c2cf744c05e0463

Download | Favorite | View