CVE-2014-0180

Red Hat CloudForms 3.0 Management Engine < 5.2.4.2 - Denial of Service via Wait for Task Function

Title source: llm
STIX 2.1

Description

The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0816.html

Scores

EPSS 0.0183
EPSS Percentile 76.6%

Details

CWE
CWE-399
Status published
Products (7)
redhat/cloudforms_3.0_management_engine 5.2
redhat/cloudforms_3.0_management_engine 5.2.1
redhat/cloudforms_3.0_management_engine 5.2.1.6
redhat/cloudforms_3.0_management_engine 5.2.2
redhat/cloudforms_3.0_management_engine 5.2.3
redhat/cloudforms_3.0_management_engine 5.2.3.2
redhat/cloudforms_3.0_management_engine < 5.2.4
Published Jul 07, 2014
Tracked Since Feb 18, 2026