CVE-2013-2050
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management...
7.5 High
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
Exploit likelihood
15.7%Down 23.1 points since Feb 4, 2022
What each source reports
NVD Score used
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
- Record
CVE-2013-2050- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
- Record
CVE-2013-2050- Updated
- 2026-11-02
EUVDEUVD-2013-2032 No score
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
- Record
EUVD-2013-2032- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3r2-9qhv-2vw2 No score
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management...
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
- Record
GHSA-h3r2-9qhv-2vw2- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cfmeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-applianceRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-libRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
cfme-vnc-pluginRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-2.el6cf | 0:1.0.0-2.el6cf |
cfme-vnc-plugin-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-2.el6cf | 0:1.0.0-2.el6cf |
libdnetRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
libdnet-progsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.12-11.el6cf | 0:1.12-11.el6cf |
Show 190 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lshwRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
lshw-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
lshw-guiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:B.02.16-4.el6cf | 0:B.02.16-4.el6cf |
mingw32-cfme-hostRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:5.2.0.37-1.el6cf | 0:5.2.0.37-1.el6cf |
netapp-manageability-sdkRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.0P1-3.el6cf | 0:4.0P1-3.el6cf |
netapp-manageability-sdk-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.0P1-3.el6cf | 0:4.0P1-3.el6cf |
open-vm-toolsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-desktopRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
open-vm-tools-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.3-5.el6cf | 0:9.2.3-5.el6cf |
postgresql92Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1-12.el6 | 0:1-12.el6 |
postgresql92-buildRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1-12.el6 | 0:1-12.el6 |
postgresql92-postgresqlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-contribRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-docsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-libsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-plperlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-plpythonRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-pltclRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-serverRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-testRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-postgresql-upgradeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.2.4-7.el6 | 0:9.2.4-7.el6 |
postgresql92-runtimeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1-12.el6 | 0:1-12.el6 |
princeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:9.0r2-3.el6cf | 0:9.0r2-3.el6cf |
pyliblzmaRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.5.3-7.el6cf | 0:0.5.3-7.el6cf |
pyliblzma-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.5.3-7.el6cf | 0:0.5.3-7.el6cf |
ruby193Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1-11.el6 | 0:1-11.el6 |
ruby193-buildRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1-11.el6 | 0:1-11.el6 |
ruby193-libyamlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-libyaml-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-libyaml-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.4-5.el6 | 0:0.1.4-5.el6 |
ruby193-rubyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-develRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-irbRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-libsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-ruby-tcltkRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.9.3.448-38.el6 | 0:1.9.3.448-38.el6 |
ruby193-rubygem-PlatformRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.4.0-4.el6cf | 0:0.4.0-4.el6cf |
ruby193-rubygem-actionmailerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-actionpackRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-4.el6cf | 1:3.2.13-4.el6cf |
ruby193-rubygem-actionwebserviceRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.1.0-3.el6cf | 1:3.1.0-3.el6cf |
ruby193-rubygem-activemodelRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-activerecordRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-3.el6cf | 1:3.2.13-3.el6cf |
ruby193-rubygem-activeresourceRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-activesupportRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-acts_as_listRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.9-1.el6cf | 0:0.1.9-1.el6cf |
ruby193-rubygem-acts_as_treeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.1-1.el6cf | 0:0.1.1-1.el6cf |
ruby193-rubygem-addressableRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.8-1.el6cf | 0:2.2.8-1.el6cf |
ruby193-rubygem-akamiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.0-1.el6cf | 0:1.2.0-1.el6cf |
ruby193-rubygem-american_dateRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-ancestryRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.5-1.el6cf | 0:1.2.5-1.el6cf |
ruby193-rubygem-arelRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.0.2-3.el6 | 0:3.0.2-3.el6 |
ruby193-rubygem-arrayfieldsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.9.0-1.el6cf | 0:4.9.0-1.el6cf |
ruby193-rubygem-awesome_printRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.0-1.el6cf | 0:1.1.0-1.el6cf |
ruby193-rubygem-aws-sdkRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.11.3-1.el6cf | 0:1.11.3-1.el6cf |
ruby193-rubygem-bcrypt-rubyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.0.1-7.el6 | 0:3.0.1-7.el6 |
ruby193-rubygem-bcrypt-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.0.1-7.el6 | 0:3.0.1-7.el6 |
ruby193-rubygem-bigdecimalRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.0-38.el6 | 0:1.1.0-38.el6 |
ruby193-rubygem-binary_structRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.1-1.el6cf | 0:1.0.1-1.el6cf |
ruby193-rubygem-brakemanRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.0-1.el6cf | 0:2.0.0-1.el6cf |
ruby193-rubygem-builderRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.0.0-3.el6 | 0:3.0.0-3.el6 |
ruby193-rubygem-bulletRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.6.0-1.el6cf | 0:4.6.0-1.el6cf |
ruby193-rubygem-bundlerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.5-3.el6cf | 0:1.3.5-3.el6cf |
ruby193-rubygem-bundler_extRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.0-3.el6cf | 0:0.3.0-3.el6cf |
ruby193-rubygem-capybaraRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.1.0-1.el6cf | 0:2.1.0-1.el6cf |
ruby193-rubygem-childprocessRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.9-1.el6cf | 0:0.3.9-1.el6cf |
ruby193-rubygem-chronicRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.0-1.el6cf | 0:0.3.0-1.el6cf |
ruby193-rubygem-churnRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.0.29-1.el6cf | 0:0.0.29-1.el6cf |
ruby193-rubygem-code_analyzerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.2-1.el6cf | 0:0.3.2-1.el6cf |
ruby193-rubygem-colorRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.4.1-4.el6cf | 0:1.4.1-4.el6cf |
ruby193-rubygem-coloredRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2-1.el6cf | 0:1.2-1.el6cf |
ruby193-rubygem-crackRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.2-1.el6cf | 0:0.3.2-1.el6cf |
ruby193-rubygem-daemonsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.9-2.el6cf | 0:1.1.9-2.el6cf |
ruby193-rubygem-dalliRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.1-1.el6cf | 0:2.2.1-1.el6cf |
ruby193-rubygem-default_value_forRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.7-1.el6cf | 0:1.0.7-1.el6cf |
ruby193-rubygem-diff-lcsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.3-1.el6 | 0:1.1.3-1.el6 |
ruby193-rubygem-elifRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.0-1.el6cf | 0:0.1.0-1.el6cf |
ruby193-rubygem-erubisRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.7.0-4.el6 | 0:2.7.0-4.el6 |
ruby193-rubygem-eventmachineRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-eventmachine-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-1.el6cf | 0:1.0.0-1.el6cf |
ruby193-rubygem-exconRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.25.3-1.el6cf | 0:0.25.3-1.el6cf |
ruby193-rubygem-ezcryptoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.7-1.el6cf | 0:0.7-1.el6cf |
ruby193-rubygem-facadeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.5-1.el6cf | 0:1.0.5-1.el6cf |
ruby193-rubygem-factory_girlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.1.0-1.el6cf | 0:4.1.0-1.el6cf |
ruby193-rubygem-fastercsvRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.5.5-2.el6cf | 0:1.5.5-2.el6cf |
ruby193-rubygem-fattrRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.1-1.el6cf | 0:2.2.1-1.el6cf |
ruby193-rubygem-ffiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.1-2.el6cf | 0:1.3.1-2.el6cf |
ruby193-rubygem-ffi-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.1-2.el6cf | 0:1.3.1-2.el6cf |
ruby193-rubygem-flayRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.3.0-1.el6cf | 0:2.3.0-1.el6cf |
ruby193-rubygem-flogRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.2.3-2.el6cf | 0:3.2.3-2.el6cf |
ruby193-rubygem-fogRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.14.0-2.el6cf | 0:1.14.0-2.el6cf |
ruby193-rubygem-formatadorRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.2.4-1.el6cf | 0:0.2.4-1.el6cf |
ruby193-rubygem-gyokuRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.4.6-1.el6cf | 0:0.4.6-1.el6cf |
ruby193-rubygem-hamlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.0.3-1.el6cf | 0:4.0.3-1.el6cf |
ruby193-rubygem-haml-railsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.4-1.el6cf | 0:0.4-1.el6cf |
ruby193-rubygem-handsoapRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.2.5-2.el6cf | 0:0.2.5-2.el6cf |
ruby193-rubygem-highlineRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.6.19-1.el6cf | 0:1.6.19-1.el6cf |
ruby193-rubygem-hikeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.1-3.el6 | 0:1.2.1-3.el6 |
ruby193-rubygem-hirbRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.7.1-1.el6cf | 0:0.7.1-1.el6cf |
ruby193-rubygem-hmacRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.4.0-7.el6cf | 0:0.4.0-7.el6cf |
ruby193-rubygem-hoeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.3-2.el6cf | 0:2.12.3-2.el6cf |
ruby193-rubygem-httpartyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.10.2-1.el6cf | 0:0.10.2-1.el6cf |
ruby193-rubygem-httpclientRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.7-1.el6cf | 0:2.2.7-1.el6cf |
ruby193-rubygem-httpiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.1-1.el6cf | 0:1.1.1-1.el6cf |
ruby193-rubygem-i18nRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.6.1-1.el6cf | 0:0.6.1-1.el6cf |
ruby193-rubygem-i18n-docRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.6.1-1.el6cf | 0:0.6.1-1.el6cf |
ruby193-rubygem-inifileRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.2-1.el6cf | 0:2.0.2-1.el6cf |
ruby193-rubygem-io-consoleRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3-38.el6 | 0:0.3-38.el6 |
ruby193-rubygem-io-extraRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-io-extra-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-japgolly-SaikuroRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.1.0-1.el6cf | 0:1.1.1.0-1.el6cf |
ruby193-rubygem-journeyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.4-2.el6 | 0:1.0.4-2.el6 |
ruby193-rubygem-jsonRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.8.0-3.el6cf | 0:1.8.0-3.el6cf |
ruby193-rubygem-json-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.8.0-3.el6cf | 0:1.8.0-3.el6cf |
ruby193-rubygem-json_pureRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.8.0-1.el6cf | 0:1.8.0-1.el6cf |
ruby193-rubygem-libxml-rubyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.2-1.el6cf | 0:2.2.2-1.el6cf |
ruby193-rubygem-libxml-ruby-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.2-1.el6cf | 0:2.2.2-1.el6cf |
ruby193-rubygem-linux_adminRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.5.1-1.el6cf | 0:0.5.1-1.el6cf |
ruby193-rubygem-little-pluggerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.3-1.el6cf | 0:1.1.3-1.el6cf |
ruby193-rubygem-log4rRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
ruby193-rubygem-loggingRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.6.2-1.el6cf | 0:1.6.2-1.el6cf |
ruby193-rubygem-mailRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.5.3-1.el6cf | 0:2.5.3-1.el6cf |
ruby193-rubygem-mail-docRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.5.3-1.el6cf | 0:2.5.3-1.el6cf |
ruby193-rubygem-mainRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:4.7.1-1.el6cf | 0:4.7.1-1.el6cf |
ruby193-rubygem-mapRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:6.5.1-1.el6cf | 0:6.5.1-1.el6cf |
ruby193-rubygem-metric_fuRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.0.0-1.el6cf | 0:3.0.0-1.el6cf |
ruby193-rubygem-mime-typesRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.20.1-1.el6cf | 0:1.20.1-1.el6cf |
ruby193-rubygem-minitestRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.2.0-3.el6cf | 0:3.2.0-3.el6cf |
ruby193-rubygem-more_core_extensionsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.1-1.el6cf | 0:1.1.1-1.el6cf |
ruby193-rubygem-multi_jsonRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.7.7-1.el6cf | 0:1.7.7-1.el6cf |
ruby193-rubygem-multi_xmlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.5.2-1.el6cf | 0:0.5.2-1.el6cf |
ruby193-rubygem-net-http-persistentRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.7-2.el6cf | 0:2.7-2.el6cf |
ruby193-rubygem-net-ldapRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.2.20110317223538-1.el6cf | 0:0.2.20110317223538-1.el6cf |
ruby193-rubygem-net-pingRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.5.3-1.el6cf | 0:1.5.3-1.el6cf |
ruby193-rubygem-net-scpRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
ruby193-rubygem-net-sftpRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.5-7.el6cf | 0:2.0.5-7.el6cf |
ruby193-rubygem-net-sshRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.6.5-2.el6cf | 0:2.6.5-2.el6cf |
ruby193-rubygem-netrcRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.7.7-3.el6cf | 0:0.7.7-3.el6cf |
ruby193-rubygem-nokogiriRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.5.6-2.el6cf | 0:1.5.6-2.el6cf |
ruby193-rubygem-nokogiri-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.5.6-2.el6cf | 0:1.5.6-2.el6cf |
ruby193-rubygem-noriRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.4-1.el6cf | 0:1.1.4-1.el6cf |
ruby193-rubygem-open4Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.0-4.el6cf | 0:1.3.0-4.el6cf |
ruby193-rubygem-ovirt_metricsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.1-1.el6cf | 0:1.0.1-1.el6cf |
ruby193-rubygem-parallelRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.5.21-1.el6cf | 0:0.5.21-1.el6cf |
ruby193-rubygem-pdf-writerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
ruby193-rubygem-pgRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.12.2-5.el6cf | 0:0.12.2-5.el6cf |
ruby193-rubygem-pg-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.12.2-5.el6cf | 0:0.12.2-5.el6cf |
ruby193-rubygem-polyglotRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.3.3-2.el6 | 0:0.3.3-2.el6 |
ruby193-rubygem-princelyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.6-1.el6cf | 0:1.2.6-1.el6cf |
ruby193-rubygem-progressbarRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.11.0-2.el6cf | 0:0.11.0-2.el6cf |
ruby193-rubygem-prototype-railsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.2.1-1.el6cf | 0:3.2.1-1.el6cf |
ruby193-rubygem-qpid_messagingRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.20.2-1.el6cf | 0:0.20.2-1.el6cf |
ruby193-rubygem-qpid_messaging-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.20.2-1.el6cf | 0:0.20.2-1.el6cf |
ruby193-rubygem-rackRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:1.4.5-3.el6cf | 1:1.4.5-3.el6cf |
ruby193-rubygem-rack-cacheRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2-2.el6 | 0:1.2-2.el6 |
ruby193-rubygem-rack-sslRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.2-7.el6 | 0:1.3.2-7.el6 |
ruby193-rubygem-rack-testRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.6.2-1.el6cf | 0:0.6.2-1.el6cf |
ruby193-rubygem-railsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-2.el6cf | 1:3.2.13-2.el6cf |
ruby193-rubygem-rails_best_practicesRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.13.8-1.el6cf | 0:1.13.8-1.el6cf |
ruby193-rubygem-railtiesRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 1:3.2.13-1.el6cf | 1:3.2.13-1.el6cf |
ruby193-rubygem-rakeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:10.1.0-1.el6cf | 0:10.1.0-1.el6cf |
ruby193-rubygem-rake-compilerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.8.3-2.el6cf | 0:0.8.3-2.el6cf |
ruby193-rubygem-rbovirtRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.0.17-3.el6cf | 0:0.0.17-3.el6cf |
ruby193-rubygem-rbvmomiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.3-4.el6cf | 0:1.2.3-4.el6cf |
ruby193-rubygem-rdocRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.9.5-38.el6 | 0:3.9.5-38.el6 |
ruby193-rubygem-reekRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.3.1-1.el6cf | 0:1.3.1-1.el6cf |
ruby193-rubygem-refRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.0-3.el6 | 0:1.0.0-3.el6 |
ruby193-rubygem-rest-clientRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.6.7-5.el6cf | 0:1.6.7-5.el6cf |
ruby193-rubygem-roodiRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.2.0-1.el6cf | 0:2.2.0-1.el6cf |
ruby193-rubygem-rspecRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.0-1.el6cf | 0:2.12.0-1.el6cf |
ruby193-rubygem-rspec-coreRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.2-1.el6cf | 0:2.12.2-1.el6cf |
ruby193-rubygem-rspec-expectationsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-rspec-mocksRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-rspec-railsRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.12.1-1.el6cf | 0:2.12.1-1.el6cf |
ruby193-rubygem-ruby-graphvizRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.9-1.el6cf | 0:1.0.9-1.el6cf |
ruby193-rubygem-ruby-plsqlRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.4.1-1.el6cf | 0:0.4.1-1.el6cf |
ruby193-rubygem-ruby-profRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.13.0-1.el6cf | 0:0.13.0-1.el6cf |
ruby193-rubygem-ruby-prof-debuginfoRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.13.0-1.el6cf | 0:0.13.0-1.el6cf |
ruby193-rubygem-ruby-progressbarRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.0.10-1.el6cf | 0:0.0.10-1.el6cf |
ruby193-rubygem-ruby2rubyRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.6-1.el6cf | 0:2.0.6-1.el6cf |
ruby193-rubygem-ruby_parserRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:3.1.3-1.el6cf | 0:3.1.3-1.el6cf |
ruby193-rubygem-rubyforgeRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.4-3.el6cf | 0:2.0.4-3.el6cf |
ruby193-rubygem-rubyrepRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.2.0-4.el6cf | 0:1.2.0-4.el6cf |
ruby193-rubygem-rubywbemRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.1.0-2.el6cf | 0:0.1.0-2.el6cf |
ruby193-rubygem-rubyzipRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:0.9.5-1.el6cf | 0:0.9.5-1.el6cf |
ruby193-rubygem-rufus-lruRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.0.5-1.el6cf | 0:1.0.5-1.el6cf |
ruby193-rubygem-rufus-schedulerRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:2.0.19-2.el6cf | 0:2.0.19-2.el6cf |
ruby193-rubygem-ruportRed Hat:cloudforms_managementengine:5::el6 From an advisory covering 8 CVEs |
before 0:1.7.0-2.el6cf | 0:1.7.0-2.el6cf |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Red Hat CloudForms Management Engine 5.1 miq_policy/explorer SQL Injection | 2013-11-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2050 is a high vulnerability (CVSS 7.5) in Redhat Manageiq Enterprise Virtualization Manager, published January 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.7%, the 96th percentile. No source names a fixed version.
References
packetstormsecurity.com/files/124609/cfme_manageiq_evm_pass_reset.rb.txt
secunia.com/advisories/56181
securityfocus.com/bid/64524
exchange.xforce.ibmcloud.com/vulnerabilities/89984
bugzilla.redhat.com/show_bug.cgi?id=959062
nvd.nist.gov/vuln/detail/CVE-2013-2050
Show 37 moreShow less
access.redhat.com/errata/RHEA-2013:1487
github.com/advisories/GHSA-h3r2-9qhv-2vw2
rhn.redhat.com/rhn/software/downloads/SupportedISOs.do?filter_string=CloudForms
security.access.redhat.com/data/csaf/v2/advisories/2013/rhea-2013_1487.json
cve.org/CVERecord?id=CVE-2013-0185
blog.mhartl.com/2008/08/15/a-security-issue-with-rails-secret-session-keys
blog.phusion.nl/2013/01/04/securing-the-rails-session-secret
This page doesn't list everything
Also not on the record: 50 package claims. ID and package lookups still check them.