Every CVESearch/Get API key

CVE-2014-3692

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default...

10.0 High

CVE-2014-3692 is a high vulnerability (CVSS 10.0) in Redhat Cloudforms 3.1 Management Engine, published January 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.95%, the 87th percentile. No source names a fixed version.

Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
2.95%EPSS, 87th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

Exploit likelihood

2.95%Up 1.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cfme
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:5.3.2.6-1.el6cf
0:5.3.2.6-1.el6cf
cfme-appliance
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:5.3.2.6-1.el6cf
0:5.3.2.6-1.el6cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:5.3.2.6-1.el6cf
0:5.3.2.6-1.el6cf
cfme-lib
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:5.3.2.6-1.el6cf
0:5.3.2.6-1.el6cf
mingw32-cfme-host
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:5.3.2.6-1.el6cf
0:5.3.2.6-1.el6cf
ruby193-rubygem-fog
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:1.19.0-2.el6cf
0:1.19.0-2.el6cf
ruby193-rubygem-linux_admin
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 3 CVEs
before 0:0.9.4-1.el6cf
0:0.9.4-1.el6cf

What each source reports

NVD Score used10.0

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

Record
CVE-2014-3692
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

Record
CVE-2014-3692
Updated
2026-11-02
EUVDEUVD-2014-3638No score

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

Record
EUVD-2014-3638
Updated
2026-11-03
GitHub AdvisoriesGHSA-c5gm-gj7m-3h35No score

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default...

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

Record
GHSA-c5gm-gj7m-3h35
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 39 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open