CVE:CVE-2014-0140
CNNVD:CNNVD-201410-115
Red Hat CloudForms Management Engine（CFME）是美国红帽（Red Hat）公司的一个IaaS（基础设施即服务）云服务解决方案的管理引擎。
Red Hat CloudForms Management Engine 5.2.5及之前版本中存在权限许可和访问控制问题漏洞。远程攻击者可通过发送直接的HTTP或HTTPS请求利用该漏洞访问并操作敏感的控制器。
solution:Upgrade redhat cloudforms_3.0.1_management_engine to a higher version than 5.2.1,and avoid the version 5.2.1; Upgrade redhat cloudforms_3.0.2_management_engine to a higher version than 5.2.2,and avoid the version 5.2.2; Upgrade redhat cloudforms_3.0.3_management_engine to a higher version than 5.2.3,and avoid the version 5.2.3; Upgrade redhat cloudforms_3.0.4_management_engine to a higher version than 5.2.4,and avoid the version 5.2.4; Upgrade redhat cloudforms_3.0.5_management_engine to a higher version than 5.2.5,and avoid the version (,5.2.5]; Upgrade redhat cloudforms_3.0_management_engine to a higher version than 5.2,and avoid the version 5.2