EUVD-2014-0150

Malware in sbrugna...

CVE-2014-0057: Improper Control of Generation of Code

The xbutton method in the ServiceController vmdb/app/controllers/servicecontroller.rb in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors...