CVE-2014-0136

Description

References

• rhn.redhat.com/errata/RHSA-2014-1037.html · Vendor Advisory
• securityfocus.com/bid/69233

More vulnerabilities in cloudforms 3.0 management engine

• CVE-2014-3642MEDIUM 6.5vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authe…
• CVE-2014-0140MEDIUM 4.0Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via…
• CVE-2014-3489MEDIUM 4.3lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for…
• CVE-2014-3486MEDIUM 6.9The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0…
• CVE-2014-0184MEDIUM 4.9Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtai…