Skip to content
OpenAdvisories
Medium RHSA-2017:1601 3 CVEs

Red Hat Security Advisory: CFME 5.7.3 security, bug fix and enhancement update

Published Sep 26, 2024 · Updated Jul 1, 2026

Fixed packages 11

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme 0:5.7.3.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-appliance 0:5.7.3.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-appliance-debuginfo 0:5.7.3.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-debuginfo 0:5.7.3.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 cfme-gemset 0:5.7.3.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-nokogiri 0:1.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-nokogiri-debuginfo 0:1.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-nokogiri-doc 0:1.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-ovirt-engine-sdk4 0:4.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-ovirt-engine-sdk4-debuginfo 0:4.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.7::el7 rh-ruby23-rubygem-ovirt-engine-sdk4-doc 0:4.1.5-1.el7cf

Vulnerabilities 3

  • Medium 4.3

    A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqRepor…

  • Medium 4.1

    The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacke…

  • Unscored —

    CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1322396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1350340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1374215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1402992
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414869
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1428944
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1430468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1434152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1434952
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436226
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436232
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436236
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436237
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437146
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437148
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437595
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439291
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439945
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1440399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1440400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1440401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1440402