Red Hat Security Advisory

RHSA-2020:4134

CloudForms 5.0.8 security, bug fix and enhancement update

Released 2020-09-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CloudForms Management Engine 5.11 cfme-gemset-5.11.8.1-1.el8cf

Fixes 1 record

TI-2020-11237 CVE-2020-14369

Cross-site request forgery in CloudForms

LOW 28

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00339 Published 2020-12-02 Fixed CWE-352