| Package | Affected versions | Patched versions |
|---|---|---|
| cloudforms 3.0.1 management engine | = 5.2.1 | |
| cloudforms 3.0.2 management engine | = 5.2.2 | |
| cloudforms 3.0.3 management engine | = 5.2.3 | |
| cloudforms 3.0.4 management engine | = 5.2.4 | |
| cloudforms 3.0.5 management engine | ≤ 5.2.5 | |
| cloudforms 3.0 management engine | = 5.2 |
Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free