Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat cloudforms 3.0 management engine - vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2019-14905
A vulnerability was found in Ansible Engine versions 2.9.x prior to 2.9.3, 2.8.x prior to 2.8.8, 2.7.x prior to 2.7.16 and previous versions, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craf...
Redhat Ansible EngineRedhat Cloudforms Management Engine 5.0Redhat Ceph Storage 3.0Redhat Ansible Tower 3.0.0Redhat Openstack 13Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0
4
CVSSv2
CVE-2019-14864
Ansible, versions 2.9.x prior to 2.9.1, 2.8.x prior to 2.8.7 and Ansible versions 2.7.x prior to 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects...
Redhat AnsibleRedhat Ansible Tower 3.0Redhat Ceph Storage 3.0Redhat Cloudforms Management Engine 5.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Debian Debian Linux 10.0Opensuse Backports Sle 15.0Opensuse Leap 15.1
6.8
CVSSv2
CVE-2014-0197
CFME: CSRF protection vulnerability via permissive check of the referrer header
Redhat Cloudforms 3.0Redhat Cloudforms Management Engine
4.3
CVSSv2
CVE-2013-6460
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
Nokogiri NokogiriDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Cloudforms Management Engine 5.0Redhat Enterprise Mrg 2.0Redhat Openstack 3.0Redhat Openstack 4.0Redhat Satellite 6.0Redhat Subscription Asset Manager -
4.3
CVSSv2
CVE-2013-6461
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
Nokogiri NokogiriDebian Debian Linux 10.0Debian Debian Linux 9.0Debian Debian Linux 8.0Redhat Openstack 4.0Redhat Satellite 6.0Redhat Subscription Asset Manager -Redhat Openstack 3.0Redhat Enterprise Mrg 2.0Redhat Cloudforms Management Engine 5.0
4
CVSSv2
CVE-2014-7813
Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors involving calls to the .to_sym rails function and lack of garbage collection of inserted symbols.
Redhat Cloudforms 3.0 Management Engine -
5
CVSSv2
CVE-2014-0136
The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote malicious users to insert arbitrary text into log files via unspecified vectors.
Redhat Cloudforms 3.0 Management Engine
7.5
CVSSv2
CVE-2014-0057
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote malicious users to execute arbitrary methods via unspecified vectors.
Redhat Cloudforms 3.0Redhat Cloudforms 3.0 Management Engine 5.2
6.8
CVSSv2
CVE-2013-6443
CloudForms 3.0 Management Engine prior to 5.2.1.6 allows remote malicious users to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.
Redhat Cloudforms 3.0Redhat Cloudforms 3.0 Management Engine 5.2Redhat Cloudforms 3.0 Management Engine
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook