CVE-2014-0136 in CloudForms 3.0 Management Engine

Summary

The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/03/2013
• Disclosure: 10/26/2014
• Moderation: VulDB entry created
• Entries: VDB-72727
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00243
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-0136
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0136
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-0136/