Design/Logic Flaw

2016-10-0714:59:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

JSON

Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.

CPENameOperatorVersion
cloudforms_management_engineeq4.1

CPE	Name	Operator	Version
	cloudforms_management_engine	eq	4.1

References

rhn.redhat.com/errata/RHSA-2016-1996.html

www.securityfocus.com/bid/93893