Cross site request forgery (csrf)

2019-12-1313:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.1%

CFME: CSRF protection vulnerability via permissive check of the referrer header

CPENameOperatorVersion
cloudformseq3.0
cloudforms_management_enginege5.0
cloudforms_management_enginele5.9.3.1

Name	Operator	Version
cloudforms	eq	3.0
cloudforms_management_engine	ge	5.0
cloudforms_management_engine	le	5.9.3.1

References

access.redhat.com/security/cve/cve-2014-0197

bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0197