CVE-2013-6443

EUVD-2013-6251
CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
redhatcloudforms
3.0
redhatcloudforms_3.0_management_engine
𝑥
≤ 5.2.1
redhatcloudforms_3.0_management_engine
5.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2014-0025.html
http://www.securitytracker.com/id/1029606
http://rhn.redhat.com/errata/RHSA-2014-0025.html
http://www.securitytracker.com/id/1029606