Code injection

2014-07-0714:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.4%

JSON

The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors.

CPENameOperatorVersion
cloudforms_3.0_management_engineeq5.2.1
cloudforms_3.0_management_enginele5.2.4
cloudforms_3.0_management_engineeq5.2.1.6
cloudforms_3.0_management_engineeq5.2.3.2
cloudforms_3.0_management_engineeq5.2.2
cloudforms_3.0_management_engineeq5.2
cloudforms_3.0_management_engineeq5.2.3

Name	Operator	Version
cloudforms_3.0_management_engine	eq	5.2.1
cloudforms_3.0_management_engine	le	5.2.4
cloudforms_3.0_management_engine	eq	5.2.1.6
cloudforms_3.0_management_engine	eq	5.2.3.2
cloudforms_3.0_management_engine	eq	5.2.2
cloudforms_3.0_management_engine	eq	5.2
cloudforms_3.0_management_engine	eq	5.2.3

References

rhn.redhat.com/errata/RHSA-2014-0816.html