{"id":"CVE-2016-5402","aliases":["EUVD-2016-6347","GHSA-6p9p-cwcr-3xj6","RHSA-2016:2839"],"status":"published","title":"A code injection flaw was found in the way capacity and utilization imported control files are...","description":"A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.05931,"percentile":0.93307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2018-10-31T13:00:00Z","modified":"2026-07-01T10:01:29Z","fixes":[{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","fixed_in":["0:5.6.3.3-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","fixed_in":["0:5.6.3.3-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","fixed_in":["0:5.6.3.3-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","fixed_in":["0:5.6.3.3-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","fixed_in":["0:5.6.3.3-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-bmc-watchdog","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-debuginfo","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-devel","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-ipmidetectd","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-ipmiseld","fixed_in":["0:1.5.1-2.el7cf"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.3.3-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.3.3-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.3.3-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.3.3-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.3.3-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-bmc-watchdog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-ipmidetectd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"freeipmi-ipmiseld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.el7cf"}]}]}],"products":[{"vendor":"[unknown]","product":"cfme"},{"vendor":"red hat","product":"cfme"},{"vendor":"redhat","product":"cloudforms"},{"vendor":"redhat","product":"cloudforms_management_engine"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5402","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking"]},{"url":"http://www.securityfocus.com/bid/94612","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2839.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5402","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2839","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357559","tags":["report"]},{"url":"https://github.com/advisories/GHSA-6p9p-cwcr-3xj6"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1380107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1380170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1381624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399285","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2839.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5402","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-5402","description":"A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","status":"published","published":"2018-10-31T13:00:00Z","modified":"2024-08-06T01:00:59.994Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-6347","description":"A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","status":"published","published":"2018-10-31T13:00:00Z","modified":"2024-08-06T01:00:59Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:22:42.442421Z"}],"ghsa":[{"id":"GHSA-6p9p-cwcr-3xj6","title":"A code injection flaw was found in the way capacity and utilization imported control files are...","description":"A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","status":"published","published":"2022-05-13T01:38:48Z","modified":"2023-02-02T15:30:29Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:52:46.933473Z"}],"nvd":[{"id":"CVE-2016-5402","description":"A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","status":"published","published":"2018-10-31T13:29:00.443Z","modified":"2026-06-17T00:49:20.76Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"RHSA-2016:2839","title":"Red Hat Security Advisory: CFME 5.6.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:46:50Z","modified":"2026-07-01T10:01:29Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"}]}}