CVE-2016-5383

High

Published: 26/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code due to a lack of field filters.

Risk Assessment

This vulnerability may lead to unauthorized access to the system and potential takeover by malicious users.

Recommendation

It is recommended to update to the latest version of Red Hat CloudForms to patch this vulnerability and implement appropriate filters in the user interface.

Other vulnerabilities in Red Hat CloudForms 4.1

CVE-2012-5605Low
A flaw was found in Grinder, a component of Red Hat CloudForms, where incorrect world-writable permissions on the `/var/lib/pulp/cache/grinder/` directory allow a local user to modify Grinder's cache files. This could lead to unauthorized data tampering within the application's cache.

Original NVD description (English source)

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS