Red Hat Security Advisory

RHSA-2014:0025

cfme security, bug fix, and enhancement update

Released 2014-01-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Management Engine cfme-5.2.1.8-1.el6cf, cfme-appliance-5.2.1.8-1.el6cf, cfme-lib-5.2.1.8-1.el6cf +3

Fixes 1 record

TI-2013-05396 CVE-2013-6443 · GHSA-vvp8-xf2f-vgc6

CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the…

LOW 31

CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a reque…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00602 Published 2014-01-23 Fixed CWE-352