Vulnerability Details CVE-2013-2068
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the filename parameter to the (1) log, (2) upload, or (3) linuxpkgs method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.753
EPSS Ranking 98.8%
CVSS Severity
CVSS v2 Score 9.4
References
Products affected by CVE-2013-2068
-
cpe:2.3:a:redhat:cloudforms_management_engine:5.1