Back to Database
Status published
High
CVE-2019-14894
A flaw was found in the CloudForms management engine version...
Vulnerability Description
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14894
Credits & Attribution
No credits recorded in the NVD database.
More from [UNKNOWN]
View All →CVE-2020-1760
A flaw was found in the Ceph Object Gateway, where...
Medium
5.8
CVE-2020-1728
A vulnerability was found in all versions of Keycloak where,...
Medium
4.8
CVE-2020-1727
A vulnerability was found in Keycloak before 9.0.2, where every...
Medium
6.4
CVE-2020-1712
A heap use-after-free vulnerability was found in systemd before version...
High
7.8
CVE-2020-1709
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior...
High
7
Affected Vendor
[UNKNOWN]
View all reports →Affected Software
CloudForms
Vulnerable Versions:
5.10, 5.11
Timeline
Official Publish:
June 22nd, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1059
Command and Scripting Interpreter
Execution
T1068
Exploitation for Privilege Escalation
Privilege Escalation
T1213
Data from Information Repositories
Collection
T1565.002
Stored Data Manipulation
Impact
T1005
Data from Local System
Collection
T1041
Exfiltration Over C2 Channel
Exfiltration