CVE-2014-0136

The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2014-10-27

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Cloudforms 3.0 Management Engine (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2014-1037.html
• http://www.securityfocus.com/bid/69233