Red Hat Security Advisory

RHSA-2014:1037

cfme security and bug fix update

Released 2014-08-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Management Engine cfme-5.2.5.3-2.el6cf, cfme-appliance-5.2.5.3-2.el6cf, cfme-lib-5.2.5.3-2.el6cf +1

Fixes 1 record

TI-2014-00130 CVE-2014-0136 · GHSA-xf8w-qcq9-6w6f

The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0…

LOW 26

The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01567 Published 2014-10-27 Fixed CWE-20