Red Hat Security AdvisoryRHSA-2014:1317
cfme security, bug fix, and enhancement update
Released 2014-10-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.3 certmonger-0.75.13-1.el6, cfme-5.3.0.15-1.el6cf, cfme-appliance-5.3.0.15-1.el6cf +47
Fixes 2 records
Priority LOW 31
vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an "insecu…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01285 · Published 2014-10-06 · Fixed CWE-264
Priority LOW 21
Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0124 · Published 2014-10-06 · Fixed CWE-264
