CVE-2014-0057
Fixed in a distro release EPSS 2%
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
Products: redhat cloudforms, redhat cloudforms_3.0_management_engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat cloudforms managementengine 5 | cfme | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-appliance | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-debuginfo | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-lib | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | mingw32-cfme-host | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-ruby | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-debuginfo | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-devel | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-irb | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-libs | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-tcltk | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-actionpack | 1:3.2.13-5.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol-doc | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bigdecimal | 0:1.1.0-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny-doc | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-excon | 0:0.31.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-fog | 0:1.19.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-io-console | 0:0.3-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-linux_admin | 0:0.7.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-more_core_extensions | 0:1.1.2-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri-debuginfo | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems | 0:1.8.23-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems-devel | 0:1.8.23-40.1.el6 |