CVE-2016-4471

ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.

• CWE-264

• https://bugzilla.redhat.com/show_bug.cgi?id=1340763Issue Tracking, Third Party Advisory
• https://github.com/ManageIQ/manageiq/pull/7856Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1340763Issue Tracking, Third Party Advisory
• https://github.com/ManageIQ/manageiq/pull/7856Issue Tracking, Third Party Advisory

Published

Jun 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4465The URLValidator class in Apache Struts 2 2.3.20 through 2.3…
• CVE-2016-4466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-4467The C client and C-based client bindings in the Apache Qpid …
• CVE-2016-4468SQL injection vulnerability in Pivotal Cloud Foundry (PCF) b…
• CVE-2016-4469Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2016-4470The key_reject_and_link function in security/keys/key.c in t…
• CVE-2016-4472The overflow protection in Expat is removed by compilers wit…8.1
• CVE-2016-4473/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote…
• CVE-2016-4474The image build process for the overcloud images in Red Hat …
• CVE-2016-4475The (1) Organization and (2) Locations APIs and UIs in Forem…
• CVE-2016-4476hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2…7.5
• CVE-2016-4477wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r c…