Skip to content
OpenAdvisories
Medium RHSA-2017:0320 2 CVEs

Red Hat Security Advisory: CFME 5.7.1 bug fixes and enhancement update

Published Sep 15, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme 0:5.7.1.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-appliance 0:5.7.1.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-appliance-debuginfo 0:5.7.1.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-debuginfo 0:5.7.1.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-gemset 0:5.7.1.3-1.el7cf

Vulnerabilities 2

  • Medium 4.9
    CVE-2017-2632

    A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create…

    Red Hat cfme
  • Medium —
    CVE-2013-4492

    i18n gem Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

    ruby-i18n i18n ruby-i18n Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1382768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390731
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1391748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1391750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1391757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394331
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394339
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396240
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396577
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397154
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397159
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397416
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397509
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1399207
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1399208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1399209