CVE-2014-0136
Fixed in a distro release EPSS 2%
The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.
Products: redhat cloudforms_3.0_management_engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat cloudforms managementengine 5 | cfme | 0:5.2.5.3-2.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-appliance | 0:5.2.5.3-2.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-debuginfo | 0:5.2.5.3-2.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-lib | 0:5.2.5.3-2.el6cf |
| Red Hat cloudforms managementengine 5 | mingw32-cfme-host | 0:5.2.5.3-2.el6cf |