CVE-2013-2050 | BDVDB-2026-59256 Detail

Description#

SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/124609/cfme_manageiq_evm_pass_reset.rb.txt
http://secunia.com/advisories/56181
http://www.securityfocus.com/bid/64524
https://exchange.xforce.ibmcloud.com/vulnerabilities/89984
https://bugzilla.redhat.com/show_bug.cgi?id=959062

Exploit#

No public exploit known

History#

Version 12014-01-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.