CVE-2016-7071

🗓️ 10 Sep 2018 15:00:00Reported by redhatType

CloudForms versions 5.6.2.2 and 5.7.0.7 allow remote authenticated attackers to execute arbitrary VM

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2016-7071	10 Sep 201818:18	–	circl
CNVD	Red Hat CloudForms Denial of Service Vulnerability	10 Nov 201600:00	–	cnvd
Cvelist	CVE-2016-7071	10 Sep 201815:00	–	cvelist
EUVD	EUVD-2016-7951	7 Oct 202500:30	–	euvd
NVD	CVE-2016-7071	10 Sep 201815:29	–	nvd
OSV	CVE-2016-7071	10 Sep 201815:29	–	osv
OSV	RHSA-2016:2091 Red Hat Security Advisory: CFME 5.6.2.2 security, and bug fix update	15 Sep 202423:46	–	osv
Prion	Code injection	10 Sep 201815:29	–	prion
Tenable Nessus	RHEL 7 : CFME 5.6.2.2 (RHSA-2016:2091)	24 Apr 202400:00	–	nessus
RedhatCVE	CVE-2016-7071	20 Oct 201617:17	–	redhatcve

NVD

Vulners

Node

redhat cloudforms_management_engineRange<5.6.2.2

redhat cloudforms_management_engineRange5.7.0.0–5.7.0.7

Node

redhat cloudformsMatch4.1

[
  {
    "product": "CFME",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "5.6.2.2"
      },
      {
        "status": "affected",
        "version": "5.7.0.7"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
rhn	www.rhn.redhat.com/errata/RHSA-2016-2091.html

21 Nov 2024 02:57Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 29

EPSS0.00471

CWE-285

cloudforms cve-2016-7071 vm id security vulnerability permission controls