Red Hat Security Advisory: Red Hat CloudForms Management Engine security update
The RHSA-2013:1157 update for Red Hat CloudForms Management Engine included an additional fix that was not documented in the erratum. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-2068US | high9.4 | Exploit | ||
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2013:1206self
- https://access.redhat.com/security/updates/classification/#criticalexternal
- https://access.redhat.com/site/articles/450563external
- https://access.redhat.com/site/documentation/en-US/CloudForms/2.0/html/Management_Engine_5.1_Technical_Notes/index.htmlexternal
- 960422external
- https://rhn.redhat.com/errata/RHSA-2013-1157.htmlexternal
- Canonical URLself
Behebungen (1)
- BehobenRed Hat CloudForms 2.0
The update is provided in a fixpack, available from: https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=17971 To install the fixpack, follow the instructions in the following Red Hat Knowledge Base article: https://access.redhat.com/site/articles/450563
https://access.redhat.com/errata/RHSA-2013:1206
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan