Red Hat Security Advisory

RHSA-2019:2587

CloudForms 4.7.9 security, bug fix and enhancement update

Released 2019-09-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CloudForms Management Engine 5.10 ansible-tower-3.5.2-1.el7at, ansible-tower-server-3.5.2-1.el7at, ansible-tower-setup-3.5.2-1.el7at +15

Fixes 2 records

TI-2019-08480 CVE-2019-11358 · GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles…

HIGH 69

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.8682 Published 2019-04-19 Partial fix · 3.4.0, 4.3.4 +3 CWE-1321

TI-2018-07668 CVE-2018-10854 · GHSA-wqjf-hq52-vg86

Cross-site scripting in Red Hat cloudforms

LOW 25

cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00608 Published 2019-11-22 Fixed CWE-79