CVE-2014-3692
Red Hat CloudForms 3.1 Management Engine 5.3 - Default Root Password Exposure
Title source: llmDescription
The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62255
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0028.html
Scores
EPSS
0.0295
EPSS Percentile
85.7%
Details
CWE
CWE-255
Status
published
Products (1)
redhat/cloudforms_3.1_management_engine
5.3
Published
Jan 16, 2015
Tracked Since
Feb 18, 2026