Description (CNA)
A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| [UNKNOWN] / cfme | affected n/a |
CWE
CWE-94
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5402
- http://www.securityfocus.com/bid/94612
- http://rhn.redhat.com/errata/RHSA-2016-2839.html
ADP enrichment
No English description supplied.