CVE-2021-32756

🗓️ 21 Jul 2021 18:45:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 53 Views

ManageIQ prior to jansa-4, kasparov-2, lasker-1 allows arbitrary code execution with root privileges

Reporter	Title	Published	Views	Family All 7
CNNVD	ManageIQ MiqExpression 代码注入漏洞	21 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-32756 Arbitrary eval through MiqExpression	21 Jul 202118:45	–	cvelist
EUVD	EUVD-2021-19527	7 Oct 202500:30	–	euvd
NVD	CVE-2021-32756	21 Jul 202119:15	–	nvd
Prion	Code injection	21 Jul 202119:15	–	prion
Positive Technologies	PT-2021-19909 · Manageiq · Manageiq	21 Jul 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-32756	22 May 202519:45	–	redhatcve

NVD

Node

manageiq manageiqMatchjansa-1-

manageiq manageiqMatchjansa-1alpha1

manageiq manageiqMatchjansa-1beta1

manageiq manageiqMatchjansa-1rc1

manageiq manageiqMatchjansa-1rc2

manageiq manageiqMatchjansa-2

manageiq manageiqMatchjansa-3

manageiq manageiqMatchkasparov-1-

manageiq manageiqMatchkasparov-1alpha1

manageiq manageiqMatchkasparov-1beta1

manageiq manageiqMatchkasparov-1beta1.1

manageiq manageiqMatchlasker-1beta1

[
  {
    "product": "manageiq",
    "vendor": "ManageIQ",
    "versions": [
      {
        "status": "affected",
        "version": "< jansa-4"
      },
      {
        "status": "affected",
        "version": "< kasparov-2"
      },
      {
        "status": "affected",
        "version": "< lasker-1"
      }
    ]
  }
]