Red Hat Security AdvisoryRHSA-2017:1367
CFME 5.8.0 security, bug, and enhancement update
Released 2017-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.8 ansible-2.2.1.0-2.el7, ansible-tower-server-3.1.2-1.el7at, ansible-tower-setup-3.1.2-1.el7at +47
Fixes 2 records
Priority LOW 35
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01123 · Published 2018-07-27 · Fixed CWE-295
Priority LOW 35
CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01058 · Published 2017-06-08 · Fixed CWE-310
