Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 131

Export CSV
CVE-2012-5509

aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat
Products
1 Cloudforms Cloud Engine
CVE-2013-1901

postgresql: Improper user privilege check for on-line backups

PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Canonical Postgresql Redhat
Products
Ubuntu Linux Postgresql Cloudforms Managementengine
CVE-2013-1900

postgresql: Improper randomization of pgcrypto functions (requiring random seed)

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

CVSS 2.0 · 8.5 High EPSS 4.5% KEV · Not listed
Vendors
Canonical Postgresql Redhat
Products
Ubuntu Linux Postgresql Cloudforms Managementengine and 1 more
CVE-2013-6417

rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155)

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request that leverages (1) third-party Rack middleware or (2) custom Rack middleware. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-0155.

CVSS 2.0 · 6.4 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Rubyonrails
Products
Cloudforms Managementengine Openstack Rhel Software Collections and 2 more
CVE-2013-1899

postgresql: Insecure switch parsing

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).

CVSS 2.0 · 6.5 Medium EPSS 54.3% KEV · Not listed
Vendors
Canonical Postgresql Redhat
Products
Ubuntu Linux Postgresql Cloudforms Managementengine
CVE-2013-4492

rubygem-i18n: cross-site scripting flaw in exception handling

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
I18n Project Redhat
Products
I18n Cloudforms Managementengine
CVE-2012-5604

rubygem-ldap_fluff: CloudForms authentication bypass when handling anonymous LDAP bind

The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Cloudforms
CVE-2013-4389

rubygem-actionmailer: email address processing DoS

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Debian Opensuse Redhat and 1 more
Products
Debian Linux Opensuse Cloudforms Managementengine and 1 more
CVE-2014-0082

rubygem-actionpack: Action View string handling denial of service

actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.

CVSS 2.0 · 5.0 Medium EPSS 6.2% KEV · Not listed
Vendors
Redhat Rubyonrails
Products
Cloudforms Managementengine Rhel Software Collections Rails and 1 more
CVE-2014-0081

rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.

CVSS 2.0 · 4.3 Medium EPSS 4.0% KEV · Not listed
Vendors
Opensuse Opensuse Project Redhat and 1 more
Products
Opensuse Opensuse Cloudforms and 5 more
CVE-2012-5603

Katello: lack of authorization in proxies_controller.rb

proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system.

CVSS 2.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cloudforms Tools Redhat Rhel Sam
Products
1 Cloudforms 1.2
CVE-2013-4164

ruby: heap overflow in floating point parsing

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

CVSS 2.0 · 6.8 Medium EPSS 35.0% KEV · Not listed
Vendors
Redhat Ruby-lang
Products
Cloudforms Managementengine Enterprise Linux Openstack and 3 more
CVE-2013-2068

cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities

Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the filename parameter to the (1) log, (2) upload, or (3) linuxpkgs method.

CVSS 2.0 · 9.4 Critical EPSS 58.6% KEV · Not listed
Vendors
Redhat
Products
Cloudforms Cloudforms Management Engine
CVE-2012-3538

katello: pulp admin password logged in plaintext in world-readable katello/production.log

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Tools Redhat
Products
1 Cloudforms
CVE-2019-16782

Possible Information Leak / Session Hijack Vulnerability in Rack

There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.

CVSS 3.1 · 6.3 Medium EPSS 3.7% KEV · Not listed
Vendors
Fedoraproject Opensuse Rack and 1 more
Products
Fedora Leap Rack and 3 more
CVE-2020-25716

Cloudforms: Incomplete fix for CVE-2020-10783

A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted only to system administrator. This is the affect of an incomplete fix for CVE-2020-10783. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before cfme 5.11.10.1 are affected

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Cloudforms Cloudforms Managementengine
CVE-2020-1740

ansible: secrets readable after ansible-vault edit

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Redhat
Products
Debian Linux Fedora Ansible and 4 more
CVE-2020-1739

ansible: svn module leaks password when specified as a parameter

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Redhat
Products
Debian Linux Fedora Ansible and 4 more