CVE-2013-6443
Fixed in a distro release EPSS <1%
CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.
Products: redhat cloudforms, redhat cloudforms_3.0_management_engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat cloudforms managementengine 5 | cfme | 0:5.2.1.8-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-appliance | 0:5.2.1.8-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-debuginfo | 0:5.2.1.8-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-lib | 0:5.2.1.8-1.el6cf |
| Red Hat cloudforms managementengine 5 | mingw32-cfme-host | 0:5.2.1.8-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-activerecord | 1:3.2.13-4.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-linux_admin | 0:0.5.6-1.el6cf |