| Package | Affected versions | Patched versions |
|---|---|---|
| cloudforms | = 3.0 | |
| cloudforms 3.0 management engine | = 5.2 |
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free