{"id":"CVE-2020-14324","aliases":["EUVD-2020-6474","RHSA-2020:3358","RHSA-2020:3574"],"status":"published","title":"Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update","description":"A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02515,"percentile":0.85041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2020-08-11T13:19:47Z","modified":"2026-06-27T10:11:04Z","affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.11::el8","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.7.3-1.el8cf"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.11::el8","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.7.3-1.el8cf"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-gemset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.16.0-1.el7cf"}]}],"bundled":4}],"products":[{"vendor":"[unknown]","product":"cloudforms"},{"vendor":"redhat","product":"cloudforms_management_engine"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855713","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://access.redhat.com/security/cve/cve-2020-14324","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3358","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1839770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855739","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3358.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10777","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10778","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10779","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10780","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14296","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14296","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14324","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14325","tags":["advisory"]},{"url":"https://github.com/ManageIQ/manageiq/security/advisories/GHSA-84f5-5g5v-g8vr","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3574","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811145","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3574.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-14324","description":"A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.","status":"published","published":"2020-08-11T13:19:47Z","modified":"2024-08-04T12:39:36.479Z","updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-6474","description":"A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.","status":"published","published":"2020-08-11T13:19:47Z","modified":"2024-08-04T12:39:36Z","updated_at":"2026-11-03T03:07:34.636169Z"}],"nvd":[{"id":"CVE-2020-14324","description":"A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.","status":"published","published":"2020-08-11T14:15:11.617Z","modified":"2026-06-17T02:54:32.417Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"RHSA-2020:3358","title":"Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update","status":"published","published":"2024-09-16T04:32:04Z","modified":"2026-06-27T10:10:58Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3574","title":"Red Hat Security Advisory: CloudForms 4.7.16 security, bug fix and enhancement update","status":"published","published":"2024-09-16T04:32:11Z","modified":"2026-06-27T10:11:04Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:07.57369Z"}]}}