Skip to content
OpenAdvisories
Unscored RHSA-2014:0215 5 CVEs

Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme 0:5.2.2.3-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-appliance 0:5.2.2.3-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-debuginfo 0:5.2.2.3-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-lib 0:5.2.2.3-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 mingw32-cfme-host 0:5.2.2.3-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby-debuginfo 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby-devel 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby-irb 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby-libs 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-ruby-tcltk 0:1.9.3.448-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-actionpack 1:3.2.13-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-amq-protocol 0:1.9.2-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-amq-protocol-doc 0:1.9.2-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-bigdecimal 0:1.1.0-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-bunny 0:1.0.7-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-bunny-doc 0:1.0.7-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-excon 0:0.31.0-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-fog 0:1.19.0-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-io-console 0:0.3-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-linux_admin 0:0.7.0-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-more_core_extensions 0:1.1.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-nokogiri 0:1.5.6-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-nokogiri-debuginfo 0:1.5.6-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygems 0:1.8.23-40.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygems-devel 0:1.8.23-40.1.el6

Vulnerabilities 5

  • Unscored —
    CVE-2013-0186

    Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web scr…

    Red Hat ManageIQ EVM ManageIQ EVM Red Hat CloudForms 3.0
  • Unscored —
    CVE-2013-4164 Public exploit EPSS 35%

    Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

    ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2014-0057

    The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Man…

  • Medium —
    CVE-2014-0081

    Rails vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (…

    rails actionpack rails Debian RubyGems
  • Medium —
    CVE-2014-0082

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consump…

    rails actionpack Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/site/documentation/en-US/CloudForms/3.0/html/Management_Engine_5.2_Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1033460
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1064140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065538
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0215.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=895346
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0186
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0186
  • report
    https://access.redhat.com/security/cve/CVE-2013-4164
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4164
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4164
  • report
    https://access.redhat.com/security/cve/CVE-2014-0057
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0057
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0057
  • report
    https://access.redhat.com/security/cve/CVE-2014-0081
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0081
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0081
  • report
    https://access.redhat.com/security/cve/CVE-2014-0082
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0082
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0082