VULNERABILITY INTELLIGENCE

CVE-2014-0136

CVSS score5 MEDIUM
EPSS probability1.57%
CISA KEVNot currently listed
Published2014-10-27
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references