CVE-2014-0078

Red Hat CloudForms Management Engine <5.2.3.2 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0469.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1064556

Scores

EPSS 0.0102
EPSS Percentile 59.7%

Details

CWE
CWE-264
Status published
Products (4)
redhat/cloudforms_3.0_management_engine 5.2
redhat/cloudforms_3.0_management_engine 5.2.1
redhat/cloudforms_3.0_management_engine 5.2.2
redhat/cloudforms_3.0_management_engine < 5.2.3
Published May 14, 2014
Tracked Since Feb 18, 2026