Read the docs
Red Hat Security Advisory

RHSA-2019:0600

CloudForms 4.6.9 security, bug fix and enhancement update

Released 2019-03-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 38

A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they shoul…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02865 Published 2018-11-30 Partial fix · 4.2.11, 5.0.7.1 +2 CWE-284