CVE-2014-3486

CVE-2014-3486 describes a local privilege escalation vulnerability affecting Red Hat CloudForms 3.0 Management Engine before version 5.2.4.2. Specifically, the shell_exec and temp_cmd_file functions in MiqSshUtilV1.rb and MiqSshUtilV2.rb, respectively, are susceptible to a symlink attack on temporary files with predictable names. This allows a local attacker to execute arbitrary commands, leading to high impacts on confidentiality, integrity, and availability, as indicated by its CVSS score of 6.9. Despite its potential severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.