Red Hat Security Advisory: Red Hat CloudForms Management Engine security update
The RHSA-2013:1157 update for Red Hat CloudForms Management Engine included an additional fix that was not documented in the erratum. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-2068US | high9.4 | Exploit | ||
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2013:1206self
- https://access.redhat.com/security/updates/classification/#criticalexternal
- https://access.redhat.com/site/articles/450563external
- https://access.redhat.com/site/documentation/en-US/CloudForms/2.0/html/Management_Engine_5.1_Technical_Notes/index.htmlexternal
- 960422external
- https://rhn.redhat.com/errata/RHSA-2013-1157.htmlexternal
- Canonical URLself
remediations (1)
- FixedRed Hat CloudForms 2.0
The update is provided in a fixpack, available from: https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=17971 To install the fixpack, follow the instructions in the following Red Hat Knowledge Base article: https://access.redhat.com/site/articles/450563
https://access.redhat.com/errata/RHSA-2013:1206
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan