Red Hat Security Advisory

RHSA-2019:2466

CloudForms 4.7.8 security, bug fix and enhancement update

Released 2019-08-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CloudForms Management Engine 5.10 ansible-tower-3.5.1-1.el7at, ansible-tower-server-3.5.1-1.el7at, ansible-tower-setup-3.5.1-1.el7at +11

Fixes 1 record

TI-2019-07480 CVE-2019-10159 · GHSA-whhr-m9m3-wj45

Improper authorization in Red Hat cfme

LOW 21

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00703 Published 2019-06-14 Fixed CWE-285