Red Hat Security Advisory

RHSA-2019:1289

CloudForms 4.6.9 security, bug fix and enhancement update

Released 2019-05-29 · Red Hat rating Important · View on Red Hat →

Fixed in

CloudForms Management Engine 5.9 cfme-5.9.9.3-1.el7cf, cfme-amazon-smartstate-5.9.9.3-1.el7cf, cfme-appliance-5.9.9.3-1.el7cf +3

Fixes 2 records

TI-2019-03828 CVE-2019-5418 · GHSA-86g5-2wh3-gc9j

Path traversal in Rails https://github.com/rails/rails

CRITICAL 90KEV

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesyste…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98507 Published 2019-03-27 Fixed in 5.2.2.1, 4.2.11.1 +2 CWE-22

TI-2019-03829 CVE-2019-5419 · GHSA-m63j-wh5w-c252

Uncontrolled resource consumption in Rails https://github.com/rails/rails

MEDIUM 44

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unre…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0844 Published 2019-03-27 Fixed in 4.2.11.1, 5.2.2.1 +3 CWE-400