Red Hat Security Advisory

RHSA-2017:3005

Red Hat CloudForms security, bug fix, and enhancement update

Released 2017-10-24 · Red Hat rating Important · View on Red Hat →

Fixed in

CloudForms Management Engine 5.8 ansible-tower-server-3.1.5-1.el7at, ansible-tower-setup-3.1.5-1.el7at, cfme-5.8.2.3-1.el7cf +6

Fixes 2 records

TI-2017-08592 CVE-2017-11610 · GHSA-x7c8-4x3h-874w

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4…

HIGH 80

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nest…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.87549 Published 2017-08-23 Partial fix · 3.0.1, 3.1.4 +2 CWE-276

TI-2017-08940 CVE-2017-12148 · GHSA-fxg8-q29x-8w2q

Improper input validation in Red Hat Ansible Tower

MEDIUM 40

A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories.

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.01707 Published 2018-07-27 Partial fix CWE-20