Red Hat Security Advisory: Red Hat CloudForms Management Engine security update
An update for Red Hat CloudForms Management Engine that fixes one security issue, several bugs, and adds one enhancement is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-4172US | high8.5 | — | ||
The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors. | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2013:1157self
- https://access.redhat.com/security/updates/classification/#importantexternal
- https://access.redhat.com/site/articles/450563external
- https://access.redhat.com/site/documentation/en-US/CloudForms/2.0/html/Management_Engine_5.1_Technical_Notes/index.htmlexternal
- 988644external
- Canonical URLself
remediations (1)
- FixedRed Hat CloudForms 2.0
This update is provided in a fixpack, available from: https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=17971 To install the fixpack, follow the instructions in the following Red Hat Knowledge Base article: https://access.redhat.com/site/articles/450563
https://access.redhat.com/errata/RHSA-2013:1157
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan