Search Results (Refine Search)
- CPE Product Version: cpe:/a:redhat:cloudforms_3.0_management_engine:5.2.4
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2014-0136 |
The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors. Published: October 26, 2014; 9:55:24 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2014-3489 |
lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack. Published: July 07, 2014; 10:55:04 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2014-3486 |
The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name. Published: July 07, 2014; 10:55:04 AM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2014-0184 |
Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file. Published: July 07, 2014; 10:55:03 AM -0400 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2014-0180 |
The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors. Published: July 07, 2014; 10:55:03 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2014-0176 |
Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: July 07, 2014; 10:55:03 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |