SQL Injection in Redhat Cloudforms_3.0_management_engine
CVE-2014-0137
SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors…
Vulnerability class: SQL Injection
EPSS: 0.004 (60.4th percentile) — read the EPSS interpretation.
Affected products
- Redhat Cloudforms_3.0_management_engine — versions 5.2, 5.2.1, 5.2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- RHSA-2014:0469 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)