Red Hat Security AdvisoryRHSA-2017:0320
CFME 5.7.1 bug fixes and enhancement update
Released 2017-02-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.7 cfme-5.7.1.3-1.el7cf, cfme-appliance-5.7.1.3-1.el7cf, cfme-gemset-5.7.1.3-1.el7cf
Fixes 2 records
Priority LOW 25
A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have.
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01453 · Published 2018-07-27 · Fixed CWE-285
Priority LOW 24
Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02231 · Published 2013-12-07 · Partial fix · 0.6.6 CWE-79
