CVE-2013-2068: Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine...

Security readout for executives and security teams

This flaw could let a remote attacker make Red Hat CloudForms Management Engine write files outside the intended location. For executives, the concern is integrity: unauthorized file creation or overwrite can disrupt management systems and may support deeper compromise, depending on privileges and deployment exposure. Likely exposure is limited to organizations running Red Hat CloudForms Management Engine 2.0 with reachable AgentController functionality. The bundle does not include CPEs, CVSS, authentication requirements, or network exposure details, so scope must be confirmed locally. Prioritize remediation if CloudForms 2.0 is still present, especially if management interfaces are reachable beyond trusted administrators. Legacy management platforms often carry high operational impact because they control infrastructure workflows. Mitigation focus: Identify any Red Hat CloudForms Management Engine 2.0 deployments.; Review and apply Red Hat RHSA-2013:1206 guidance where applicable.; Restrict CloudForms management access to trusted administrative networks..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.