Skip to content
Sign in
8.0 High

CVE-2019-14894 A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which…

Description

A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.

Affected products and versions

Product Affected versions Fixed in
CloudForms 5.11 No fix stated
CloudForms 5.10 No fix stated

Other CVEs of CloudForms

The 2 CVEs of CloudForms →
CVE-2017-2639 It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when… 6.5 Medium
Track this CVE