Red Hat Security Advisory

RHSA-2018:3466

CloudForms 4.6.5 security, bug fix and enhancement update

Released 2018-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CloudForms Management Engine 5.9 ansible-tower-3.2.7-1.el7at, ansible-tower-server-3.2.7-1.el7at, ansible-tower-setup-3.2.7-1.el7at +9

Fixes 1 record

TI-2018-15941 CVE-2018-1000544 · GHSA-vqcq-mrmw-mcmg

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal…

MEDIUM 49

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04339 Published 2018-06-26 Partial fix · 1.2.2 CWE-434