NetSight
high7.5

CVE-2013-2049

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

Impact

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

Affected products

VendorProductAffected versions
RedhatCloudforms Management Engine
Version 2.0

Weakness classification

References