CVE-2014-0136 Other in n/a
Remote attackers can insert arbitrary text into log files in Red Hat CloudForms, potentially corrupting logs or misleading administrators.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-0136?
CVE-2014-0136 is a medium-severity vulnerability in n/a, published on 27 Oct 2014. It can be exploited over the network, with no action from the victim.
Official description
The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.
Weakness: CWE-20
Which versions are affected by CVE-2014-0136?
It affects 1 product.
Linux distribution packages (5)
cfme Red Hat:cloudforms_managementengine:5::el6 | All versions | 0:5.2.5.3-2.el6cf |
cfme-appliance Red Hat:cloudforms_managementengine:5::el6 | All versions | 0:5.2.5.3-2.el6cf |
cfme-debuginfo Red Hat:cloudforms_managementengine:5::el6 | All versions | 0:5.2.5.3-2.el6cf |
cfme-lib Red Hat:cloudforms_managementengine:5::el6 | All versions | 0:5.2.5.3-2.el6cf |
mingw32-cfme-host Red Hat:cloudforms_managementengine:5::el6 | All versions | 0:5.2.5.3-2.el6cf |
Products include Redhat Cloudforms 3.0 Management Engine.
How do I fix CVE-2014-0136?
Apply the vendor's patch.
Is CVE-2014-0136 being exploited?
There is no known exploitation of CVE-2014-0136 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xf8w-qcq9-6w6f, RHSA-2014:1037.