Moderate: Red Hat Security Advisory: cfme, cfme-appliance, and cfme-gemset security, bug fix, and enhancement update

An update for cfme, cfme-appliance, and cfme-gemset is now available for CloudForms Management Engine 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: CFME 5.7.1 bug fixes and enhancement update

Updated cfme packages that fix bugs and add various enhancements are now available for Red Hat CloudForms 4.2. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is buil...

Red Hat CloudForms Management Engine Remote Code Execution Vulnerability (CNVD-2016-11916)

The Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud services solutions from Red Hat, Inc. A remote code execution vulnerability exists in Red Hat CFME. An attacker could exploit this vulnerability to execute arbitrary code...

cfme: RCE via Capacity & Utilization feature

A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as...

Important: Red Hat Security Advisory: CFME 5.6.3 security, bug fix, and enhancement update

An update is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

CVE-2016-8224

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine ME protections. This could result in a denial of service or privilege escalation attack...

Privilege escalation

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine ME protections. This could result in a denial of service or privilege escalation attack...

CVE-2016-8224

The CVE-2016-8224 issue affects Lenovo Notebook and ThinkServer systems where an administrator could install a program that circumvents Intel Management Engine (ME) protections, enabling denial of service or privilege escalation. Connected Lenovo advisory LEN-9903 confirms the problem and reitera...

CVE-2016-8224

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine ME protections. This could result in a denial of service or privilege escalation attack...

Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - us

Lenovo Security Advisory: LEN-9903 Potential Impact: Denial of service or privilege escalation by an attacker with administrative access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8224 Summary Description: A vulnerability has been identified in some Lenovo Notebook a...

Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - Lenovo Support US

No description provided...

Important: Red Hat Security Advisory: CFME 5.6.2.2 security, and bug fix update

An update for cfme is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Intel Management Engine Components 8.0.1.1399 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: IntelR Management Engine Components - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 8.0.1.1399 Tested on: Windows 7 Professional The IntelR Management and Security Application...

Intel(R) Management Engine Components 8.0.1.1399 Privilege Escalation

Exploit Title: IntelR Management Engine Components - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 8.0.1.1399 Tested on: Windows 7 Professional The IntelR Management and Security Application Local Management Service LMS is installed with an unquote...

Intel(R) Management Engine Components 8.0.1.1399 - Unquoted Service Path Privilege Escalation

IntelR Management Engine Components 8.0.1.1399 - Unquoted Service Path Privilege Escalation Exploit Title: IntelR Management Engine Components - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 8.0.1.1399 Tested on: Windows 7 Professional The IntelR...

Intel(R) Management Engine Components 8.0.1.1399 - Unquoted Service Path Privilege Escalation

Exploit Title: IntelR Management Engine Components - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 8.0.1.1399 Tested on: Windows 7 Professional The IntelR Management and Security Application Local Management Service LMS is installed with an unquote...

Red Hat CloudForms Management Engine Arbitrary Command Execution Vulnerability

The Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud services solutions from Red Hat, Inc. An arbitrary command execution vulnerability exists in Red Hat CFME version 4.1, which can be exploited by remote attackers to execute arbitrary...

CVE-2016-7040

Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections...

CVE-2016-7040

Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections...

Design/Logic Flaw

Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections...