Vulnerability in Red Hat Cloudforms 3.1 Management Engine

CVE-2014-3692

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

EPSS: 0.029 (85.7th percentile) — read the EPSS interpretation.

Affected products

Redhat Cloudforms_3.1_management_engine — versions 5.3
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)