RHSA-2014:0816High

Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Published
June 30, 2014
Last Modified
June 27, 2026

🔗 CVE IDs covered (7)

CVE-2014-0180 →CVE-2014-0184 →CVE-2014-0197 →CVE-2014-3486 →CVE-2014-3489 →CVE-2014-0130 →CVE-2014-0176 →

📋 Description

CVE-2014-0130 — rubygem-actionpack: directory traversal issue CVE-2014-0176 — CFME: reflected XSS in several places due to missing JavaScript escaping CVE-2014-0180 — CFME: app/controllers/application_controller.rb wait_for_task DoS CVE-2014-0184 — CFME: root password is written to evm.log when entered during VM provisioning CVE-2014-0197 — CFME: CSRF protection vulnerability in referrer header CVE-2014-3486 — CFME: SSH Utility insecure tmp file creation leading to code execution as root CVE-2014-3489 — CFME: Default salt value in miq-password.rb

🔗 References (9)