The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1634 advisory.

    Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the     challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a     model-view-controller (MVC) framework for web application development. Action Pack implements the     controller and the view components.

    Security Fix(es):

    * It was found that the CloudForms web UI did not properly filter input in certain fields. A remote,     authenticated attacker could use this flaw to execute arbitrary code on the system running CloudForms.
    (CVE-2016-5383)

    This issue was discovered by Eric Hayes (Red Hat).

    Additional Changes:

    This update also fixes several bugs and adds various enhancements.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

high