Search for packages
| purl | pkg:rpm/redhat/cfme@5.2.4.2-1?arch=el6cf |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-35rt-t6e1-pfa6
Aliases: CVE-2014-0130 GHSA-6x85-j5j2-27jx |
Directory Traversal Vulnerability With Certain Route Configurations The implicit render functionality allows controllers to render a template, even if there is no explicit action with the corresponding name. This module does not perform adequate input sanitization which could allow an attacker to use a specially crafted request to retrieve arbitrary files from the RoR application server. | There are no reported fixed by versions. |
|
VCID-9p4g-4z1t-jfca
Aliases: CVE-2014-0184 |
CFME: root password is written to evm.log when entered during VM provisioning | There are no reported fixed by versions. |
|
VCID-enjr-t724-c3g2
Aliases: CVE-2014-0176 |
CFME: reflected XSS in several places due to missing JavaScript escaping | There are no reported fixed by versions. |
|
VCID-g74c-dmyc-8khb
Aliases: CVE-2014-0197 |
CFME: CSRF protection vulnerability in referrer header | There are no reported fixed by versions. |
|
VCID-p2th-zbdt-uqbs
Aliases: CVE-2014-0180 |
CFME: app/controllers/application_controller.rb wait_for_task DoS | There are no reported fixed by versions. |
|
VCID-qt97-y6q8-6qdh
Aliases: CVE-2014-3486 |
CFME: SSH Utility insecure tmp file creation leading to code execution as root | There are no reported fixed by versions. |
|
VCID-ux9r-1v3d-bqgy
Aliases: CVE-2014-3489 |
CFME: Default salt value in miq-password.rb | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||