Skip to content
OpenAdvisories
High RHSA-2017:3005 2 CVEs

Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-server 0:3.1.5-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-setup 0:3.1.5-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme 0:5.8.2.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance 0:5.8.2.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance-debuginfo 0:5.8.2.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-debuginfo 0:5.8.2.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-gemset 0:5.8.2.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rabbitmq-server 0:3.6.9-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri 0:1.8.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-debuginfo 0:1.8.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-doc 0:1.8.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 supervisor 0:3.1.4-1.el7

Vulnerabilities 2

  • High 8.8
    CVE-2017-11610 Public exploit Scanner template EPSS 88%

    Incorrect Default Permissions in Supervisor

    The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

    supervisor supervisor supervisor supervisor Debian Ubuntu Alpine PyPI
  • High 8.4
    CVE-2017-12148

    A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM rep…

    Red Hat Ansible Tower

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.5/html/release_notes/index#red_hat_cloudforms_4_5_2
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439650
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459996
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1460754
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1461061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1465087
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1465089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1476143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477702
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478367
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478391
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478406
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478428
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478435
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478436
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478506
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478508
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478510
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478513
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478523
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1478526