CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Redhat » Cloudforms Management Engine » 5.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*
CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2020-14296 918 2020-08-11 2020-08-12
5.5
 None Remote Low ??? Partial Partial None
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.
2 CVE-2020-10780 20 2020-08-11 2021-07-21
4.9
 None Remote Medium ??? Partial Partial None
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affects the application directly, attackers could use the loosely validated parameters to trigger several attack possibilities.
3 CVE-2020-1740 377 2020-03-16 2022-04-05
1.9
 None Local Medium Not required Partial None None
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
4 CVE-2020-1739 200 +Info 2020-03-12 2022-04-01
3.3
 None Local Medium Not required Partial Partial None
A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.
5 CVE-2020-1738 88 2020-03-16 2021-08-04
2.6
 None Local High Not required None Partial Partial
A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
6 CVE-2020-1736 732 2020-03-16 2022-04-05
2.1
 None Local Low Not required Partial None None
A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
7 CVE-2020-1735 22 Dir. Trav. 2020-03-16 2022-04-05
3.6
 None Local Low Not required Partial Partial None
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
8 CVE-2020-1733 362 +Priv 2020-03-11 2022-04-25
3.7
 None Local High Not required Partial Partial Partial
A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.
9 CVE-2019-14905 668 2020-03-31 2021-11-02
4.6
 None Local Low Not required Partial Partial Partial
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.
10 CVE-2019-14864 532 2020-01-02 2022-04-22
4.0
 None Remote Low ??? Partial None None
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.
11 CVE-2017-7528 93 2018-08-22 2019-10-09
3.3
 None Local Network Low Not required None Partial None
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).
12 CVE-2016-3702 200 +Info 2017-04-21 2017-04-27
5.0
 None Remote Low Not required Partial None None
Padding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to obtain sensitive cleartext information.
13 CVE-2014-3536 532 2019-12-15 2019-12-19
2.1
 None Local Low Not required Partial None None
CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration
14 CVE-2013-6461 776 2019-11-05 2020-08-18
4.3
 None Remote Medium Not required None None Partial
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
15 CVE-2013-6460 776 DoS 2019-11-05 2020-08-18
4.3
 None Remote Medium Not required None None Partial
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
16 CVE-2012-6685 776 2020-02-19 2020-02-25
5.0
 None Remote Low Not required Partial None None
Nokogiri before 1.5.4 is vulnerable to XXE attacks
Total number of vulnerabilities : 16   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.