CVE-2013-4172

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-4172
The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors.

8.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2013-1157.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:cloudforms_management_engine:5.1:*:*:*:*:*:*:*
History

13 Feb 2023, 04:45

Type Values Removed Values Added
Summary CVE-2013-4172 CFME 2.0 web interface: Ruby code injection The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors.
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2013-4172', 'name': 'https://access.redhat.com/security/cve/CVE-2013-4172', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=988644', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=988644', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2013:1157', 'name': 'https://access.redhat.com/errata/RHSA-2013:1157', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHEA-2013:1487', 'name': 'https://access.redhat.com/errata/RHEA-2013:1487', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 20:15

Type Values Removed Values Added
Summary The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors. CVE-2013-4172 CFME 2.0 web interface: Ruby code injection
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2013-4172 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=988644 -
  • (MISC) https://access.redhat.com/errata/RHSA-2013:1157 -
  • (MISC) https://access.redhat.com/errata/RHEA-2013:1487 -
Information

Published : 2013-08-23 16:55

Updated : 2023-12-10 11:16

NVD link : CVE-2013-4172

Mitre link : CVE-2013-4172

CVE.ORG link : CVE-2013-4172

JSON object : View

Products Affected

redhat

  • cloudforms_management_engine
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')