Описание
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
Дополнительная информация
Статус:
Important
Дефект:
CWE-470
https://bugzilla.redhat.com/show_bug.cgi?id=1064140CFME: Dangerous send in ServiceController
EPSS
Процентиль: 72%
0.00703
Низкий
6.5 Medium
CVSS2
Связанные уязвимости
nvd
почти 12 лет назад
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
github
больше 3 лет назад
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.
EPSS
Процентиль: 72%
0.00703
Низкий
6.5 Medium
CVSS2