CVE-2019-14894

—

CVSS 3.1

7.2 high

EPSS

4%p90

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.

Vendors: redhat
Products: cloudforms management engine
Weakness: CWE-20, CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.