CVE-2014-0140

Related Files

Red Hat Security Advisory 2014-1317-01

Posted Oct 3, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1317-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. It was found that Red Hat CloudForms exposed default routes that were reachable via HTTP requests. An authenticated user could use this flaw to access potentially sensitive controllers and actions that would allow for privilege escalation.

tags | advisory, web, ruby

systems | linux, redhat

advisories | CVE-2014-0140, CVE-2014-3642

SHA-256 | b962e7c0e3042f38ba447e5a27fe022040ac9f55d595d2db04814f50dbbae6c1

Download | Favorite | View