Red Hat Security AdvisoryRHSA-2017:3484
Red Hat CloudForms security, bug fix, and enhancement update
Released 2017-12-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.7 cfme-5.7.4.2-1.el7cf, cfme-appliance-5.7.4.2-1.el7cf, cfme-gemset-5.7.4.2-1.el7cf +2
Fixes 1 record
Priority LOW 31
CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01302 · Published 2018-07-26 · Fixed CWE-284
