CVE-2016-5402

2018-10-3113:29:00

Google

osv.dev

7.7 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.0%

JSON

A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.

CPENameOperatorVersion
manageiqeqdarga-1-beta1
manageiqeqdarga-2
manageiqeqdarga-4
manageiqeqdarga-1-rc1
manageiqeqdarga-4.1
manageiqeqdarga-3
manageiqeqdarga-1
manageiqeqdarga-1-rc1.1

Name	Operator	Version
manageiq	eq	darga-1-beta1
manageiq	eq	darga-2
manageiq	eq	darga-4
manageiq	eq	darga-1-rc1
manageiq	eq	darga-4.1
manageiq	eq	darga-3
manageiq	eq	darga-1
manageiq	eq	darga-1-rc1.1