CVE-2014-0197

CVE-2014-0197 is a Cross-Site Request Forgery (CSRF) vulnerability in CFME/Red Hat CloudForms Management Engine caused by a permissive check of the referrer header. Affected component is CFME web application; impact is partial confidentiality, integrity, and availability compromises per CVSS 3.1/...

PT-2019-7041 · Red Hat · Cfme

Name of the Vulnerable Software and Affected Versions: CFME affected versions not specified Description: The issue concerns a CSRF protection vulnerability due to a permissive check of the referrer header. Recommendations: At the moment, there is no information about a newer version that contains...

CFME: CSRF protection vulnerability in referrer header

CFME: CSRF protection vulnerability via permissive check of the referrer header...