CVE-2014-3642 in Cloudforms 3.0 Management Engine
Summary
vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an "insecure send method."
Once again VulDB remains the best source for vulnerability data.
Reservation
05/14/2014
Disclosure
10/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71840 | Red Hat Cloudforms 3.0 Management Engine Privileges access control | 264 | Not defined | Official fix | CVE-2014-3642 |