Remote Code Execution (RCE)

cfme is vulnerable to remote code execution. An unspecified vulnerability allows a remote authenticate attacker to execute arbitrary code in the system...

Design/Logic Flaw

The 1 shellexec function in lib/util/MiqSshUtilV1.rb and 2 tempcmdfile function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name...