Red Hat CloudForms Management Engine CVE-2014-0078 Access Bypass Vulnerability

Bugtraq ID:	67443
Class:	Design Error
CVE:	CVE-2014-0078
Remote:	Yes
Local:	No
Published:	May 15 2014 12:00AM
Updated:	Mar 19 2015 09:19AM
Credit:	Jan Rusnacko
Vulnerable:
Not Vulnerable:

Red Hat CloudForms Management Engine CVE-2014-0078 Access Bypass Vulnerability

Red Hat CloudForms Management Engine is prone to an access-bypass vulnerability.

Attackers can leverage this issue to bypass security restrictions and delete arbitrary catalogs; this may aid in launching further attacks.

Red Hat CloudForms Management Engine prior to 5.2.3.2 are vulnerable.

Red Hat CloudForms Management Engine CVE-2014-0078 Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Red Hat CloudForms Management Engine CVE-2014-0078 Access Bypass Vulnerability

References:

• Bug 1064556 - (CVE-2014-0078) CVE-2014-0078 CFME: multiple authorization bypass (Red Hat)
  
• CloudForms Management Engine Downloads (Red Hat)
  
• Security Advisory : cfme security, bug fix, and enhancement update (Red Hat)