CVE-2014-0078

Опубликовано: 14 мая 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.

Ссылки

http://rhn.redhat.com/errata/RHSA-2014-0469.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1064556
http://rhn.redhat.com/errata/RHSA-2014-0469.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1064556

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:*:*:*:*:*:*:*:*

Версия до 5.2.3 (включая)

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.01019

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-0078

redhat

больше 12 лет назад

The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.

GHSA-fxwq-pp2x-ch5j

github

около 4 лет назад

The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.

EPSS

Процентиль: 60%

0.01019

Низкий

4 Medium

CVSS2

Дефекты

CWE-264