CVE-2013-4172

Description

References

• rhn.redhat.com/errata/RHSA-2013-1157.html · Vendor Advisory

More vulnerabilities in cloudforms management engine

• CVE-2014-8164CRITICAL 9.1A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red …
• CVE-2020-14324CRITICAL 9.1A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection v…
• CVE-2020-14296HIGH 7.1Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an at…
• CVE-2020-10780MEDIUM 6.3Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the fi…
• CVE-2019-14894HIGH 7.2A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execut…