CVE-2014-0140: Medium severity red hat cloudforms management engine 3.0.2 vulnerability
IssueDescription:
It was found that Red Hat CloudForms exposed default routes that were reachable via HTTP(S) requests. An authenticated user could use this flaw to access potentially sensitive controllers and actions that would allow for privilege escalation.
Other sources
Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0140?
CVE-2014-0140 is classified as a moderate severity vulnerability due to potential privilege escalation risks.
How do I fix CVE-2014-0140?
To remediate CVE-2014-0140, it is recommended to apply the latest patches and updates provided by Red Hat for affected versions of CloudForms.
Who is affected by CVE-2014-0140?
CVE-2014-0140 affects users running specific versions of Red Hat CloudForms Management Engine, including versions 5.2.1 to 5.2.5.
What are the potential risks associated with CVE-2014-0140?
The potential risks of CVE-2014-0140 include unauthorized access to sensitive data and actions that could lead to privilege escalation.
Is CVE-2014-0140 a critical vulnerability?
CVE-2014-0140 is not classified as critical, but it poses significant risks if exploited by an authenticated user.