Aller au contenu
Se connecter
7.8 Élevée

CVE-2018-10905 CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms

Description

CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.

Produits et versions touchés

Produit Versions touchées Corrigé en
cfme Versions non publiées

Autres CVE de cfme

Les 3 CVE de cfme →
CVE-2016-5402 A code injection flaw was found in the way capacity and utilization imported control files are processed 8.8 Élevée CVE-2017-7497 The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user 4.1 Moyenne
Suivre cette CVE