CVE-2014-0078 The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.
MediumCVSS 4.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cloudforms 3.0 management engine | <= 5.2.3 | No fix listed |
| redhat cloudforms 3.0 management engine | = 5.2 | No fix listed |
| redhat cloudforms 3.0 management engine | = 5.2.1 | No fix listed |
| redhat cloudforms 3.0 management engine | = 5.2.2 | No fix listed |
References
- RHSA-2014:0469 vendor-advisory
- bugzilla.redhat.com