CVE-2013-2050: SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME)...

Security readout for executives and security teams

This vulnerability lets an authenticated user abuse a SQL injection flaw in Red Hat CloudForms/ManageIQ management software to run arbitrary database commands. Because these platforms manage virtualization environments, compromise could affect sensitive operational data and administrative control paths. Exposure is most likely in legacy Red Hat CloudForms 2.0 CFME 5.1 or ManageIQ EVM 5.0 and earlier systems, especially where authenticated users can reach the management web interface. Prioritize if any affected management platform remains in use. The flaw needs authentication, but successful abuse could impact a virtualization management database and related operational trust. Mitigation focus: Check Red Hat and ManageIQ guidance for the corrected release or advisory.; Inventory CloudForms CFME and ManageIQ EVM versions across management networks.; Restrict management interface access to trusted administrative networks and accounts..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.