CVE-2014-3486

The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine…

published July 7, 2014

CVSS
—
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.6th percentile
Published
2014-07-07T14:00Z
EPSS history
Timeline
  • 07 JUL 14:00Z
    The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine…
    cvelistv5