CVE-2014-0197: CSRF
Published Dec 13, 2019
·Updated
CFME: CSRF protection vulnerability via permissive check of the referrer header
Affected Software
2 affected components
redhat Cloudforms=3.0
redhat CloudForms Management Engine>=5.0<=5.9.3.1
Event History
Dec 13, 2019
CVE Published
via MITRE·12:48 PM
Data Sourced
via MITRE·12:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-0197?
The severity of CVE-2014-0197 is high with a CVSS score of 8.8.
2
How does CVE-2014-0197 affect Redhat Cloudforms?
Redhat Cloudforms versions 3.0 and above are affected by CVE-2014-0197.
3
How does CVE-2014-0197 affect Redhat Cloudforms Management Engine?
Redhat Cloudforms Management Engine versions 5.0 through 5.9.3.1 are affected by CVE-2014-0197.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2014-0197?
CVE-2014-0197 is associated with CWE-352.
5
Where can I find more information about CVE-2014-0197?
You can find more information about CVE-2014-0197 at the following references: [https://access.redhat.com/security/cve/cve-2014-0197](https://access.redhat.com/security/cve/cve-2014-0197) and [https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0197](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0197).