CVE-2013-2050

2: miq_policy/explorer SQL injection

Published Jan 11, 2014 CVSS 2.0 · 7.5 High EPSS 15.7% KEV · Not listed
Description
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:20 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Jan 11, 2014, 1:55 AM
Modified
Jun 16, 2026, 11:52 PM
Severity
Important
Public date
Nov 13, 2013, 12:00 AM