CVE-2014-0136

Description

References

• rhn.redhat.com/errata/RHSA-2014-1037.html · Vendor Advisory
• securityfocus.com/bid/69233

Mais vulnerabilidades de cloudforms 3.0 management engine

• CVE-2014-3642MÉDIO 6.5vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authe…
• CVE-2014-0140MÉDIO 4.0Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via…
• CVE-2014-3489MÉDIO 4.3lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for…
• CVE-2014-3486MÉDIO 6.9The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0…
• CVE-2014-0184MÉDIO 4.9Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtai…