high7.5
CVE-2014-0057
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attacke…
Impact
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Cloudforms | Version 3.0 |
| Redhat | Cloudforms 3.0 Management Engine | Version 5.2 |