CVE-2014-0140

MEDIUM · 4.0 CVSS Gepubliceerd: 06-10-2014 CWE-264

Beschrijving

Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.

Vendors

Redhat

Affected products

Cloudforms 3.0.1 Management Engine Cloudforms 3.0.2 Management Engine Cloudforms 3.0.3 Management Engine Cloudforms 3.0.4 Management Engine Cloudforms 3.0.5 Management Engine Cloudforms 3.0 Management Engine

References

rhn.redhat.com
bugzilla.redhat.com