CVE-2021-32756

ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to...

PT-2021-19909 · Manageiq · Manageiq

Name of the Vulnerable Software and Affected Versions: ManageIQ versions prior to jansa-4 ManageIQ versions prior to kasparov-2 ManageIQ versions prior to lasker-1 Description: The issue is related to a flaw in the MiqExpression module where a low privilege user could enter a crafted Ruby string...