CVE-2013-4172

The CVE-2013-4172 entry affects Red Hat CloudForms Management Engine 5.1, where an input sanitization flaw allows remote administrators to execute arbitrary Ruby code with root privileges via unspecified vectors. The vulnerability is rooted in a defect in handling administrative input, enabling c...

CVE-2013-2068

CVE-2013-2068: In Red Hat CloudForms Management Engine 2.0, the AgentController exposes a directory traversal vulnerability via the filename parameter to log, upload, or linuxpkgs, allowing a remote attacker to create/overwrite arbitrary files. Root cause is improper sanitization of the parameter...