102 matches found
Authorization
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available...
CVE-2019-10159
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available...
CVE-2019-10159
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available...
CVE-2019-10159
CVE-2019-10159 affects cfme-gemset versions 5.10.4.3 and below and 5.9.9.3 and below, due to an improper authorization in the migration log controller that can leak VM migration logs to any unprivileged user. Documents consistently identify the issue as a data-leak vulnerability in cfme-gemset. A...
PT-2019-11603 · Red Hat · Cfme-Gemset
Name of the Vulnerable Software and Affected Versions: cfme-gemset versions 5.10.4.3 and below cfme-gemset versions 5.9.9.3 and below Description: The issue is related to an improper authorization in the migration log controller, which can lead to a data leak. An attacker with access to an...
CVE-2019-10159
A data leak vulnerability was found in cfme-gemset, in versions including and prior to 5.10.4.3 and versions including and prior to 5.9.9.3, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user account can access all VM migration logs...
Authorization Bypass
cfme is vulnerable to authorization bypass. The vulnerability exists through an insecure send method...
SQL Injection
cfme is vulnerable to SQL injection. The vulnerability exists by sending a request through the REST API, to an SQL filter...
Authorization Bypass
CFME is vulnerable to authorization bypass. User role permissions for actions associated with catalogs are not properly validated, which would allow an authenticated Management Engine user to use this flaw to delete arbitrary catalogs regardless of the granted permissions...
SQL Injection
CFME is vulnerable to SQL injection. An input sanitization flaw was found in the savedreportdelete action in the ReportController. An authenticated Management Engine user could use this flaw to perform an SQL injection attack on the Management Engine back end database...
Arbitrary Code Execution
cfme is vulnerable to arbitrary code execution. An improper access control in dRuby allows local users to execute arbitrary commands as root...
Privilege Escalation
cfme-gemset is vulnerable to privilege escalation attacks. The vulnerability exists as a flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC VMWare Remote Console functions that may not be appropriate fo...
Privilege Escalation
cfme is vulnerable to privilege escalation attacks. The vulnerability exists as CloudForms Management Engine cfme before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods withi...
Information Disclosure
cfme is vulnerable to information disclosure attacks. The vulnerability exists as a flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to...
CSRF Bypass
cfme is vulnerable to CSRF bypass attacks. The vulnerability exists as a number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could allow an attacker to bypass the protectfromforgery CSRF protection...
Code Injection
Red Hat CloudForms Management Engine is vulnerable to a code injection. It is due to the flaw in the way capacity and utilization imported control files are processed, allowing anyone with access to the capacity and utilization feature to execute arbitrary code as the user CFME runs as...
Privilege Escalation
cfme is vulnerable to privilege escalation attacks. The vulnerability exists as it was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on...
Remote Code Execution (RCE)
cfme is vulnerable to remote code execution RCE attacks. The vulnerability exists as Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute...
Remote Code Execution (RCE)
cfme is vulnerable to remote code execution RCE attacks. The vulnerability exists as the web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...