CVE-2014-0140 in Cloudforms 3.0 Management Engine
Summary
Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/03/2013
Disclosure
10/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71836 | Red Hat Cloudforms 3.0 Management Engine access control | 264 | Not defined | Official fix | CVE-2014-0140 |