Skip to content
OpenAdvisories
High RHSA-2017:1758 4 CVEs

Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible 0:2.3.0.0-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-server 0:3.1.3-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-setup 0:3.1.3-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme 0:5.8.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance 0:5.8.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance-debuginfo 0:5.8.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-debuginfo 0:5.8.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-gemset 0:5.8.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri 0:1.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-debuginfo 0:1.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-doc 0:1.7.2-1.el7cf

Vulnerabilities 4

  • High 8.8
    CVE-2017-7530

    In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missin…

    Red Hat cfme
  • Medium 6.5
    CVE-2017-2664

    CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the r…

    Red Hat CloudForms
  • Medium 4.3
    CVE-2016-7047

    A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqRepor…

    Red Hat cfme
  • Medium 4.1
    CVE-2017-7497

    The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacke…

    [UNKNOWN] CFME

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1374215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1435393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439309
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441321
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1444505
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1449273
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450082
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450087
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450150
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450502
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1454445
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1455685
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1456017
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458333
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458339
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458360
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458365
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458374
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458445
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458447
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458448
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458454
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458900
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458919
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458921
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458924
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458925