Red Hat Security AdvisoryRHSA-2017:0898
cfme, cfme-appliance, and cfme-gemset security, bug fix, and enhancement update
Released 2017-04-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.7 cfme-5.7.2.1-1.el7cf, cfme-appliance-5.7.2.1-1.el7cf, cfme-gemset-5.7.2.1-1.el7cf
Fixes 1 record
Priority LOW 32
A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01387 · Published 2018-07-27 · Fixed CWE-20
