CVE-2013-2049
First published: Tue May 01 2018(Updated: )
Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Cloudforms Management Engine | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2013-2049?
CVE-2013-2049 is a vulnerability in Red Hat CloudForms 2 Management Engine (CFME) that allows remote attackers to conduct session tampering attacks.
How does CVE-2013-2049 affect Red Hat CloudForms Management Engine?
CVE-2013-2049 affects Red Hat CloudForms Management Engine version 2.0.
What is the severity of CVE-2013-2049?
CVE-2013-2049 has a severity rating of 7.5, which is considered high.
How can remote attackers exploit CVE-2013-2049?
Remote attackers can exploit CVE-2013-2049 by leveraging the use of a static secret_token.rb secret to conduct session tampering attacks.
Is there a fix for CVE-2013-2049?
Yes, there is a fix available for CVE-2013-2049. It is recommended to update to a patched version of Red Hat CloudForms Management Engine.
- collector/nvd-index
- vendor/redhat
- canonical/redhat cloudforms management engine
- version/redhat cloudforms management engine/2.0