Red Hat Security Advisory

RHSA-2018:2745

CloudForms 4.5.5 security, bug fix and enhancement update

Released 2018-09-26 · Red Hat rating Important · View on Red Hat →

Fixed in

CloudForms Management Engine 5.8 ansible-tower-server-3.1.8-1.el7at, ansible-tower-setup-3.1.8-1.el7at, cfme-5.8.5.1-1.el7cf +3

TI-2018-02756 CVE-2018-3760 · GHSA-pr3h-jjhj-573x

MEDIUM 55

There is an information leak vulnerability in Sprockets.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.26346 Published 2018-06-26 Partial fix · 3.7.2, 4.0.0.beta8 +1 CWE-22

TI-2018-07718 CVE-2018-10905 · GHSA-jjjj-c3mp-q822

LOW 35

CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00474 Published 2018-07-24 Fixed CWE-284