CVE-2013-2050: SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager…

PriorityP258high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

15.66%

96.5th percentile

SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
redhat	cloudforms_management_engine	—	—
redhat	manageiq_enterprise_virtualization_manager	<= 5.0	—

Detection & IOCsextracted from sources · hover to see the quote

url/miq_policy/explorer↗

otherprofile[]↗

→Monitor HTTP requests targeting the /miq_policy/explorer endpoint for anomalous or SQL-bearing values in the profile[] parameter, which is the specific injection vector for this CVE. ↗
→The attack requires authenticated access; correlate suspicious miq_policy/explorer requests with authenticated session activity to prioritize alerts. ↗
→A known Metasploit auxiliary module (cfme_manageiq_evm_pass_reset.rb) exploits this vulnerability by changing account passwords via SQL injection; monitor for unexpected account password changes in CFME/ManageIQ. ↗

·Vulnerability affects Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier only; CloudForms 3.0 resolves the issue. ↗

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

vendor_redhat7.5HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.