Red Hat Cloudforms Management Engine
By the Year
In 2024 there have been 0 vulnerabilities in Red Hat Cloudforms Management Engine . Cloudforms Management Engine did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 9.10 |
| 2021 | 0 | 0.00 |
| 2020 | 12 | 5.47 |
| 2019 | 4 | 7.08 |
| 2018 | 5 | 7.44 |
It may take a day or so for new Cloudforms Management Engine vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Red Hat Cloudforms Management Engine Security Vulnerabilities
A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.
CVE-2014-8164
9.1 - Critical
- July 06, 2022
A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.
Improper Certificate Validation
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw
CVE-2020-14296
7.1 - High
- August 11, 2020
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.
XSPA
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw
CVE-2020-10780
6.3 - Medium
- August 11, 2020
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affects the application directly, attackers could use the loosely validated parameters to trigger several attack possibilities.
Improper Input Validation
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11
CVE-2019-14894
7.2 - High
- June 22, 2020
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.
Improper Input Validation
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module
CVE-2019-14905
5.6 - Medium
- March 31, 2020
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.
Exposure of Resource to Wrong Sphere
A flaw was found in the Ansible Engine when the fetch module is used
CVE-2020-1735
4.6 - Medium
- March 16, 2020
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Directory traversal
A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified
CVE-2020-1736
3.3 - Low
- March 16, 2020
A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Incorrect Permission Assignment for Critical Resource
A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified
CVE-2020-1738
3.9 - Low
- March 16, 2020
A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Argument Injection
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files
CVE-2020-1740
4.7 - Medium
- March 16, 2020
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Insecure Temporary File
A flaw was found in Ansible 2.7.16 and prior
CVE-2020-1739
3.9 - Low
- March 12, 2020
A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.
Information Disclosure
A race condition flaw was found in Ansible Engine 2.7.17 and prior
CVE-2020-1733
5 - Medium
- March 11, 2020
A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.
Race Condition
Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2012-6685
7.5 - High
- February 19, 2020
Nokogiri before 1.5.4 is vulnerable to XXE attacks
XEE
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors
CVE-2019-14864
6.5 - Medium
- January 02, 2020
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.
Insertion of Sensitive Information into Log File
CFME: CSRF protection vulnerability
CVE-2014-0197
8.8 - High
- December 13, 2019
CFME: CSRF protection vulnerability via permissive check of the referrer header
Session Riding
Nokogiri gem 1.5.x has Denial of Service
CVE-2013-6460
6.5 - Medium
- November 05, 2019
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
XEE
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
CVE-2013-6461
6.5 - Medium
- November 05, 2019
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
XEE
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms
CVE-2019-10177
6.5 - Medium
- June 27, 2019
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.
XSS
A code injection flaw was found in the way capacity and utilization imported control files are processed
CVE-2016-5402
8.8 - High
- October 31, 2018
A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.
Code Injection
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user
CVE-2017-7497
4.3 - Medium
- July 27, 2018
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.
Authorization
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift
CVE-2017-2639
7.5 - High
- July 27, 2018
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
Improper Certificate Validation
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms
CVE-2018-10905
7.8 - High
- July 24, 2018
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.
Shell injection
The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME)
CVE-2014-0087
8.8 - High
- January 11, 2018
The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbac_user_edit action.
Permissions, Privileges, and Access Controls
CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.
CVE-2016-4457
7.5 - High
- June 08, 2017
CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.
Cryptographic Issues
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier
CVE-2013-2050
- January 11, 2014
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.
SQL Injection
The Red Hat CloudForms Management Engine 5.1
CVE-2013-4172
- August 23, 2013
The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors.
Code Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Red Hat Cloudforms Management Engine or by Red Hat? Click the Watch button to subscribe.
