CVE-2013-0185
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ...
8.8 HighFix available
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.73%Down 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
- Record
CVE-2013-0185- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
- Record
CVE-2013-0185- Updated
- 2026-11-02
EUVDEUVD-2013-0221 No score
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
- Record
EUVD-2013-0221- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xj7r-w8cv-6rrq
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ...
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
- Record
GHSA-xj7r-w8cv-6rrq- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cfmeRed Hat:cloudforms_managementengine:5::el6 |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-applianceRed Hat:cloudforms_managementengine:5::el6 |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-libRed Hat:cloudforms_managementengine:5::el6 |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-vnc-pluginRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-2.el6cf | 0:1.0.0-2.el6cf |
cfme-vnc-plugin-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-2.el6cf | 0:1.0.0-2.el6cf |
libdnetRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-progsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
Show 190 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lshwRed Hat:cloudforms_managementengine:5::el6 |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
lshw-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
lshw-guiRed Hat:cloudforms_managementengine:5::el6 |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
mingw32-cfme-hostRed Hat:cloudforms_managementengine:5::el6 |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
netapp-manageability-sdkRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.0P1-3.el6cf | 0:4.0P1-3.el6cf |
netapp-manageability-sdk-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.0P1-3.el6cf | 0:4.0P1-3.el6cf |
open-vm-toolsRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-desktopRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
postgresql92Red Hat:cloudforms_managementengine:5::el6 |
before 0:1-12.el6 | 0:1-12.el6 |
postgresql92-buildRed Hat:cloudforms_managementengine:5::el6 |
before 0:1-12.el6 | 0:1-12.el6 |
postgresql92-postgresqlRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-contribRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-docsRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-libsRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-plperlRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-plpythonRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-pltclRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-serverRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-testRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-upgradeRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-runtimeRed Hat:cloudforms_managementengine:5::el6 |
before 0:1-12.el6 | 0:1-12.el6 |
princeRed Hat:cloudforms_managementengine:5::el6 |
before 0:9.0r2-3.el6cf | 0:9.0r2-3.el6cf |
pyliblzmaRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.5.3-7.el6cf | 0:0.5.3-7.el6cf |
pyliblzma-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.5.3-7.el6cf | 0:0.5.3-7.el6cf |
ruby193Red Hat:cloudforms_managementengine:5::el6 |
before 0:1-11.el6 | 0:1-11.el6 |
ruby193-buildRed Hat:cloudforms_managementengine:5::el6 |
before 0:1-11.el6 | 0:1-11.el6 |
ruby193-libyamlRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-libyaml-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-libyaml-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-rubyRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-develRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-irbRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-libsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-tcltkRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-rubygem-PlatformRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.4.0-4.el6cf | 0:0.4.0-4.el6cf |
ruby193-rubygem-actionmailerRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-actionpackRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-4.el6cf | 1:3.2.13-4.el6cf |
ruby193-rubygem-actionwebserviceRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.1.0-3.el6cf | 1:3.1.0-3.el6cf |
ruby193-rubygem-activemodelRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-activerecordRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-activeresourceRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-activesupportRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-acts_as_listRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.9-1.el6cf | 0:0.1.9-1.el6cf |
ruby193-rubygem-acts_as_treeRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.1-1.el6cf | 0:0.1.1-1.el6cf |
ruby193-rubygem-addressableRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.8-1.el6cf | 0:2.2.8-1.el6cf |
ruby193-rubygem-akamiRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.0-1.el6cf | 0:1.2.0-1.el6cf |
ruby193-rubygem-american_dateRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-ancestryRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.5-1.el6cf | 0:1.2.5-1.el6cf |
ruby193-rubygem-arelRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.0.2-3.el6 | 0:3.0.2-3.el6 |
ruby193-rubygem-arrayfieldsRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.9.0-1.el6cf | 0:4.9.0-1.el6cf |
ruby193-rubygem-awesome_printRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.0-1.el6cf | 0:1.1.0-1.el6cf |
ruby193-rubygem-aws-sdkRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.11.3-1.el6cf | 0:1.11.3-1.el6cf |
ruby193-rubygem-bcrypt-rubyRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.0.1-7.el6 | 0:3.0.1-7.el6 |
ruby193-rubygem-bcrypt-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.0.1-7.el6 | 0:3.0.1-7.el6 |
ruby193-rubygem-bigdecimalRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.0-38.el6 | 0:1.1.0-38.el6 |
ruby193-rubygem-binary_structRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.1-1.el6cf | 0:1.0.1-1.el6cf |
ruby193-rubygem-brakemanRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.0-1.el6cf | 0:2.0.0-1.el6cf |
ruby193-rubygem-builderRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.0.0-3.el6 | 0:3.0.0-3.el6 |
ruby193-rubygem-bulletRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.6.0-1.el6cf | 0:4.6.0-1.el6cf |
ruby193-rubygem-bundlerRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.5-3.el6cf | 0:1.3.5-3.el6cf |
ruby193-rubygem-bundler_extRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.0-3.el6cf | 0:0.3.0-3.el6cf |
ruby193-rubygem-capybaraRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.1.0-1.el6cf | 0:2.1.0-1.el6cf |
ruby193-rubygem-childprocessRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.9-1.el6cf | 0:0.3.9-1.el6cf |
ruby193-rubygem-chronicRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.0-1.el6cf | 0:0.3.0-1.el6cf |
ruby193-rubygem-churnRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.0.29-1.el6cf | 0:0.0.29-1.el6cf |
ruby193-rubygem-code_analyzerRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.2-1.el6cf | 0:0.3.2-1.el6cf |
ruby193-rubygem-colorRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.4.1-4.el6cf | 0:1.4.1-4.el6cf |
ruby193-rubygem-coloredRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2-1.el6cf | 0:1.2-1.el6cf |
ruby193-rubygem-crackRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.2-1.el6cf | 0:0.3.2-1.el6cf |
ruby193-rubygem-daemonsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.9-2.el6cf | 0:1.1.9-2.el6cf |
ruby193-rubygem-dalliRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.1-1.el6cf | 0:2.2.1-1.el6cf |
ruby193-rubygem-default_value_forRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.7-1.el6cf | 0:1.0.7-1.el6cf |
ruby193-rubygem-diff-lcsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.3-1.el6 | 0:1.1.3-1.el6 |
ruby193-rubygem-elifRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.0-1.el6cf | 0:0.1.0-1.el6cf |
ruby193-rubygem-erubisRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.7.0-4.el6 | 0:2.7.0-4.el6 |
ruby193-rubygem-eventmachineRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-eventmachine-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-exconRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.25.3-1.el6cf | 0:0.25.3-1.el6cf |
ruby193-rubygem-ezcryptoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.7-1.el6cf | 0:0.7-1.el6cf |
ruby193-rubygem-facadeRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.5-1.el6cf | 0:1.0.5-1.el6cf |
ruby193-rubygem-factory_girlRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.1.0-1.el6cf | 0:4.1.0-1.el6cf |
ruby193-rubygem-fastercsvRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.5.5-2.el6cf | 0:1.5.5-2.el6cf |
ruby193-rubygem-fattrRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.1-1.el6cf | 0:2.2.1-1.el6cf |
ruby193-rubygem-ffiRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.1-2.el6cf | 0:1.3.1-2.el6cf |
ruby193-rubygem-ffi-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.1-2.el6cf | 0:1.3.1-2.el6cf |
ruby193-rubygem-flayRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.3.0-1.el6cf | 0:2.3.0-1.el6cf |
ruby193-rubygem-flogRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.2.3-2.el6cf | 0:3.2.3-2.el6cf |
ruby193-rubygem-fogRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.14.0-2.el6cf | 0:1.14.0-2.el6cf |
ruby193-rubygem-formatadorRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.2.4-1.el6cf | 0:0.2.4-1.el6cf |
ruby193-rubygem-gyokuRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.4.6-1.el6cf | 0:0.4.6-1.el6cf |
ruby193-rubygem-hamlRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.0.3-1.el6cf | 0:4.0.3-1.el6cf |
ruby193-rubygem-haml-railsRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.4-1.el6cf | 0:0.4-1.el6cf |
ruby193-rubygem-handsoapRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.2.5-2.el6cf | 0:0.2.5-2.el6cf |
ruby193-rubygem-highlineRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.6.19-1.el6cf | 0:1.6.19-1.el6cf |
ruby193-rubygem-hikeRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.1-3.el6 | 0:1.2.1-3.el6 |
ruby193-rubygem-hirbRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.7.1-1.el6cf | 0:0.7.1-1.el6cf |
ruby193-rubygem-hmacRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.4.0-7.el6cf | 0:0.4.0-7.el6cf |
ruby193-rubygem-hoeRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.3-2.el6cf | 0:2.12.3-2.el6cf |
ruby193-rubygem-httpartyRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.10.2-1.el6cf | 0:0.10.2-1.el6cf |
ruby193-rubygem-httpclientRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.7-1.el6cf | 0:2.2.7-1.el6cf |
ruby193-rubygem-httpiRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.1-1.el6cf | 0:1.1.1-1.el6cf |
ruby193-rubygem-i18nRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.6.1-1.el6cf | 0:0.6.1-1.el6cf |
ruby193-rubygem-i18n-docRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.6.1-1.el6cf | 0:0.6.1-1.el6cf |
ruby193-rubygem-inifileRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.2-1.el6cf | 0:2.0.2-1.el6cf |
ruby193-rubygem-io-consoleRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3-38.el6 | 0:0.3-38.el6 |
ruby193-rubygem-io-extraRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-io-extra-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-japgolly-SaikuroRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.1.0-1.el6cf | 0:1.1.1.0-1.el6cf |
ruby193-rubygem-journeyRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.4-2.el6 | 0:1.0.4-2.el6 |
ruby193-rubygem-jsonRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.8.0-3.el6cf | 0:1.8.0-3.el6cf |
ruby193-rubygem-json-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.8.0-3.el6cf | 0:1.8.0-3.el6cf |
ruby193-rubygem-json_pureRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.8.0-1.el6cf | 0:1.8.0-1.el6cf |
ruby193-rubygem-libxml-rubyRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.2-1.el6cf | 0:2.2.2-1.el6cf |
ruby193-rubygem-libxml-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.2-1.el6cf | 0:2.2.2-1.el6cf |
ruby193-rubygem-linux_adminRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.5.1-1.el6cf | 0:0.5.1-1.el6cf |
ruby193-rubygem-little-pluggerRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.3-1.el6cf | 0:1.1.3-1.el6cf |
ruby193-rubygem-log4rRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
ruby193-rubygem-loggingRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.6.2-1.el6cf | 0:1.6.2-1.el6cf |
ruby193-rubygem-mailRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.5.3-1.el6cf | 0:2.5.3-1.el6cf |
ruby193-rubygem-mail-docRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.5.3-1.el6cf | 0:2.5.3-1.el6cf |
ruby193-rubygem-mainRed Hat:cloudforms_managementengine:5::el6 |
before 0:4.7.1-1.el6cf | 0:4.7.1-1.el6cf |
ruby193-rubygem-mapRed Hat:cloudforms_managementengine:5::el6 |
before 0:6.5.1-1.el6cf | 0:6.5.1-1.el6cf |
ruby193-rubygem-metric_fuRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.0.0-1.el6cf | 0:3.0.0-1.el6cf |
ruby193-rubygem-mime-typesRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.20.1-1.el6cf | 0:1.20.1-1.el6cf |
ruby193-rubygem-minitestRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.2.0-3.el6cf | 0:3.2.0-3.el6cf |
ruby193-rubygem-more_core_extensionsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.1-1.el6cf | 0:1.1.1-1.el6cf |
ruby193-rubygem-multi_jsonRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.7.7-1.el6cf | 0:1.7.7-1.el6cf |
ruby193-rubygem-multi_xmlRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.5.2-1.el6cf | 0:0.5.2-1.el6cf |
ruby193-rubygem-net-http-persistentRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.7-2.el6cf | 0:2.7-2.el6cf |
ruby193-rubygem-net-ldapRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.2.20110317223538-1.el6cf | 0:0.2.20110317223538-1.el6cf |
ruby193-rubygem-net-pingRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.5.3-1.el6cf | 0:1.5.3-1.el6cf |
ruby193-rubygem-net-scpRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
ruby193-rubygem-net-sftpRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.5-7.el6cf | 0:2.0.5-7.el6cf |
ruby193-rubygem-net-sshRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.6.5-2.el6cf | 0:2.6.5-2.el6cf |
ruby193-rubygem-netrcRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.7.7-3.el6cf | 0:0.7.7-3.el6cf |
ruby193-rubygem-nokogiriRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.5.6-2.el6cf | 0:1.5.6-2.el6cf |
ruby193-rubygem-nokogiri-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.5.6-2.el6cf | 0:1.5.6-2.el6cf |
ruby193-rubygem-noriRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.4-1.el6cf | 0:1.1.4-1.el6cf |
ruby193-rubygem-open4Red Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.0-4.el6cf | 0:1.3.0-4.el6cf |
ruby193-rubygem-ovirt_metricsRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.1-1.el6cf | 0:1.0.1-1.el6cf |
ruby193-rubygem-parallelRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.5.21-1.el6cf | 0:0.5.21-1.el6cf |
ruby193-rubygem-pdf-writerRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
ruby193-rubygem-pgRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.12.2-5.el6cf | 0:0.12.2-5.el6cf |
ruby193-rubygem-pg-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.12.2-5.el6cf | 0:0.12.2-5.el6cf |
ruby193-rubygem-polyglotRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.3.3-2.el6 | 0:0.3.3-2.el6 |
ruby193-rubygem-princelyRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-progressbarRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.11.0-2.el6cf | 0:0.11.0-2.el6cf |
ruby193-rubygem-prototype-railsRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.2.1-1.el6cf | 0:3.2.1-1.el6cf |
ruby193-rubygem-qpid_messagingRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.20.2-1.el6cf | 0:0.20.2-1.el6cf |
ruby193-rubygem-qpid_messaging-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.20.2-1.el6cf | 0:0.20.2-1.el6cf |
ruby193-rubygem-rackRed Hat:cloudforms_managementengine:5::el6 |
before 1:1.4.5-3.el6cf | 1:1.4.5-3.el6cf |
ruby193-rubygem-rack-cacheRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2-2.el6 | 0:1.2-2.el6 |
ruby193-rubygem-rack-sslRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.2-7.el6 | 0:1.3.2-7.el6 |
ruby193-rubygem-rack-testRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.6.2-1.el6cf | 0:0.6.2-1.el6cf |
ruby193-rubygem-railsRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-2.el6cf | 1:3.2.13-2.el6cf |
ruby193-rubygem-rails_best_practicesRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.13.8-1.el6cf | 0:1.13.8-1.el6cf |
ruby193-rubygem-railtiesRed Hat:cloudforms_managementengine:5::el6 |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-rakeRed Hat:cloudforms_managementengine:5::el6 |
before 0:10.1.0-1.el6cf | 0:10.1.0-1.el6cf |
ruby193-rubygem-rake-compilerRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.8.3-2.el6cf | 0:0.8.3-2.el6cf |
ruby193-rubygem-rbovirtRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.0.17-3.el6cf | 0:0.0.17-3.el6cf |
ruby193-rubygem-rbvmomiRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.3-4.el6cf | 0:1.2.3-4.el6cf |
ruby193-rubygem-rdocRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.9.5-38.el6 | 0:3.9.5-38.el6 |
ruby193-rubygem-reekRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.3.1-1.el6cf | 0:1.3.1-1.el6cf |
ruby193-rubygem-refRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.0-3.el6 | 0:1.0.0-3.el6 |
ruby193-rubygem-rest-clientRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.6.7-5.el6cf | 0:1.6.7-5.el6cf |
ruby193-rubygem-roodiRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.2.0-1.el6cf | 0:2.2.0-1.el6cf |
ruby193-rubygem-rspecRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.0-1.el6cf | 0:2.12.0-1.el6cf |
ruby193-rubygem-rspec-coreRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.2-1.el6cf | 0:2.12.2-1.el6cf |
ruby193-rubygem-rspec-expectationsRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-rspec-mocksRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-rspec-railsRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-ruby-graphvizRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.9-1.el6cf | 0:1.0.9-1.el6cf |
ruby193-rubygem-ruby-plsqlRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.4.1-1.el6cf | 0:0.4.1-1.el6cf |
ruby193-rubygem-ruby-profRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.13.0-1.el6cf | 0:0.13.0-1.el6cf |
ruby193-rubygem-ruby-prof-debuginfoRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.13.0-1.el6cf | 0:0.13.0-1.el6cf |
ruby193-rubygem-ruby-progressbarRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.0.10-1.el6cf | 0:0.0.10-1.el6cf |
ruby193-rubygem-ruby2rubyRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.6-1.el6cf | 0:2.0.6-1.el6cf |
ruby193-rubygem-ruby_parserRed Hat:cloudforms_managementengine:5::el6 |
before 0:3.1.3-1.el6cf | 0:3.1.3-1.el6cf |
ruby193-rubygem-rubyforgeRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.4-3.el6cf | 0:2.0.4-3.el6cf |
ruby193-rubygem-rubyrepRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.2.0-4.el6cf | 0:1.2.0-4.el6cf |
ruby193-rubygem-rubywbemRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.1.0-2.el6cf | 0:0.1.0-2.el6cf |
ruby193-rubygem-rubyzipRed Hat:cloudforms_managementengine:5::el6 |
before 0:0.9.5-1.el6cf | 0:0.9.5-1.el6cf |
ruby193-rubygem-rufus-lruRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.0.5-1.el6cf | 0:1.0.5-1.el6cf |
ruby193-rubygem-rufus-schedulerRed Hat:cloudforms_managementengine:5::el6 |
before 0:2.0.19-2.el6cf | 0:2.0.19-2.el6cf |
ruby193-rubygem-ruportRed Hat:cloudforms_managementengine:5::el6 |
before 0:1.7.0-2.el6cf | 0:1.7.0-2.el6cf |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0185 is a high vulnerability (CVSS 8.8) in Redhat Manageiq Enterprise Virtualization Manager, published May 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. Fixed in cfme 0:5.2.0.37-1.el6cf.
References
bugzilla.redhat.com/show_bug.cgi?id=895345
nvd.nist.gov/vuln/detail/CVE-2013-0185
access.redhat.com/errata/RHEA-2013:1487
github.com/advisories/GHSA-xj7r-w8cv-6rrq
Show 33 moreShow less
rhn.redhat.com/rhn/software/downloads/SupportedISOs.do?filter_string=CloudForms
security.access.redhat.com/data/csaf/v2/advisories/2013/rhea-2013_1487.json
cve.org/CVERecord?id=CVE-2013-0185
blog.mhartl.com/2008/08/15/a-security-issue-with-rails-secret-session-keys
blog.phusion.nl/2013/01/04/securing-the-rails-session-secret
This page doesn't list everything
Also not on the record: 50 package claims. ID and package lookups still check them.