TI-2020-11195 CVE-2020-14324
OS command injection in CloudForms
Priority MEDIUM 44
A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0.
RHSA-2020:3574
CloudForms 4.7.16 security, bug fix and enhancement update
Released 2020-08-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.10 cfme-5.10.16.0-1.el7cf, cfme-appliance-5.10.16.0-1.el7cf, cfme-appliance-common-5.10.16.0-1.el7cf +2
Fixes 4 records
TI-2020-11196 CVE-2020-14325
Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization…
Priority MEDIUM 41
Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles.
TI-2020-08678 CVE-2020-10783
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw.
Priority LOW 38
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw.
TI-2020-08673 CVE-2020-10778
In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the…
Priority LOW 28
In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation.