cfme-lib vulnerabilities (Red Hat)
44 vulnerabilities.
-
cfme-libRed Hat CFME: CSRF protection vulnerability via permissive check of the referrer header 8.8 High -
cfme-libRed Hat CloudForms stores user passwords in recoverable format 5.5 Medium -
cfme-libRed Hat Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to... 6.1 Medium -
cfme-libRed Hat Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session... 7.5 High -
cfme-libRed Hat Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ... 8.8 High -
cfme-libRed Hat The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as... 8.8 High -
cfme-libRed Hat Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME)... 5.1 Medium -
cfme-libRed Hat rest-client Gem Vulnerable to Session Fixation 9.8 Critical -
cfme-libRed Hat rest-client allows local users to obtain sensitive information by reading the log 2.1 Low -
cfme-libRed Hat SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote... 6.5 Medium -
cfme-libRed Hat The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default... 10.0 High -
cfme-libRed Hat sprockets vulnerable to Path Traversal 5.0 Medium -
cfme-libRed Hat The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management... 5.0 Medium -
cfme-libRed Hat vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management... 6.5 Medium -
cfme-libRed Hat Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to... 4.0 Medium -
cfme-libRed Hat lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a... 4.3 Medium -
cfme-libRed Hat The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib... 6.9 Medium -
cfme-libRed Hat Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when... 4.9 Medium -
cfme-libRed Hat The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0... 5.0 Medium -
cfme-libRed Hat Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0... 4.3 Medium -
cfme-libRed Hat SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat... 6.5 Medium -
cfme-libRed Hat The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote... 4.0 Medium -
cfme-libRed Hat actionpack Path Traversal vulnerability 7.5 High -
cfme-libRed Hat The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red... 7.5 High -
cfme-libRed Hat actionpack Improper Input Validation vulnerability 5.0 Medium -
cfme-libRed Hat Rails vulnerable to Cross-site Scripting 4.3 Medium -
cfme-libRed Hat Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x... 6.5 Medium -
cfme-libRed Hat The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2... 4.0 Medium -
cfme-libRed Hat Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12,... 6.5 Medium -
cfme-libRed Hat Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8... 6.5 Medium -
cfme-libRed Hat Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x... 6.5 Medium -
cfme-libRed Hat Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL... 4.9 Medium -
cfme-libRed Hat The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x... 6.5 Medium -
cfme-libRed Hat PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x... 4.0 Medium -
cfme-libRed Hat CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on... 6.8 Medium -
cfme-libRed Hat SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management... 7.5 High -
cfme-libRed Hat actionpack allows bypass of database-query restrictions 6.4 Medium -
cfme-libRed Hat i18n gem Cross-site Scripting vulnerability 4.3 Medium -
cfme-libRed Hat Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before... 6.8 Medium -
cfme-libRed Hat actionmailer email address processing causes Denial of service 4.3 Medium -
cfme-libRed Hat The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary... 8.5 High -
cfme-libRed Hat PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION... 4.0 Medium -
cfme-libRed Hat PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,... 8.5 High -
cfme-libRed Hat Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x... 6.5 Medium