Red Hat Enterprise Linux Hpc Node Eus vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Enterprise Linux Hpc Node Eus: 3 record(s), with affected versions and fixes.cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus
CVE-2016-5388
High · 8.1
CWE-284 Jul 18, 2016
Improper Access Control in Apache Tomcat
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.
CVE-2016-3718
Medium · 5.5
KEV High · 61 Public exploit CWE-918 May 5, 2016
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715
Medium · 5.5
KEV High · 61 Public exploit CWE-552 May 5, 2016
ImageMagick Arbitrary File Deletion Vulnerability
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.