Lucene search
HistoryOct 06, 2014 - 2:55 p.m.
CVE-2014-3642
cve-2014-3642
red hat cloudforms
cfme
privilege escalation
security vulnerability
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an “insecure send method.”
Affected configurations
Node
redhatcloudforms_3.0.1_management_engineMatch5.2.1
ORredhatcloudforms_3.0.2_management_engineMatch5.2.2
ORredhatcloudforms_3.0.3_management_engineMatch5.2.3
ORredhatcloudforms_3.0.4_management_engineMatch5.2.4
ORredhatcloudforms_3.0.5_management_engineRange≤5.2.5
ORredhatcloudforms_3.0_management_engineMatch5.2
Related
prion
prion
Design/Logic Flaw
2014-10-06 14:55:00
nvd
nvd
CVE-2014-3642
2014-10-06 14:55:10
veracode
veracode
Authorization Bypass
2019-05-02 05:11:47
cvelist
cvelist
CVE-2014-3642
2014-10-06 14:00:00
redhat
redhat
(RHSA-2014:1317) Moderate: cfme security, bug fix, and enhancement update
2014-10-02 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2014-3642