NVD

Id
21619  
Name
CVE-2016-7040  
Description
Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-07  
Modified Date
2016-11-28  
Seq
2016-7040  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116315 21619 CVE-2016-7040 RHSA-2016:1996  View
116316 21619 CVE-2016-7040 93893  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4409 JVNDB-2016-005182 Red Hat CloudForms Management Engine における任意のシェルコマンドを実行される脆弱性 Red Hat CloudForms Management Engine は、JSON API および Web ベースの UI を介して正規表現エンジンに渡される正規表現を適切に処理しないため、任意のシェルコマンドを実行される脆弱性が存在します。 CVE-2016-7040 93547 CVE-2016-7040 21619 9 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005182.html 2016-10-04 2016-10-13 View