CVE-2016-5402

Related Files

Red Hat Security Advisory 2016-2839-01

Posted Nov 30, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-2839-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Security Fix: A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.

tags | advisory, remote, web, arbitrary, ruby

systems | linux, redhat

advisories | CVE-2016-5402

SHA-256 | d9718f61734342769a0127149f824e770233555d6fa898c9d7302f5fe72a836d

Download | Favorite | View