Skip to content
OpenAdvisories
High RHSA-2018:2745 2 CVEs

Red Hat Security Advisory: CloudForms 4.5.5 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-server 0:3.1.8-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-setup 0:3.1.8-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme 0:5.8.5.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance 0:5.8.5.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance-debuginfo 0:5.8.5.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-debuginfo 0:5.8.5.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-gemset 0:5.8.5.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-postgresql-pglogical 0:1.2.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-postgresql-pglogical-debuginfo 0:1.2.1-2.el7cf

Vulnerabilities 2

  • High 7.8
    CVE-2018-10905

    CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms.…

    [UNKNOWN] CFME
  • High 7.5
    CVE-2018-3760 Public exploit Scanner template EPSS 26%

    Sprockets path traversal leads to information leak

    There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root di…

    HackerOne Sprockets ruby-sprockets sprockets Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.5/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1586214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1590761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591443
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593058
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593678
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593798
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1594008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1594028
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1594326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1594387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1595457
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1595462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1595771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1596336
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1602190
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1608849
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1622632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1625250
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626502
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2745.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-3760
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-3760
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-3760
  • article
    http://www.openwall.com/lists/oss-security/2018/06/19/2
  • article
    https://blog.heroku.com/rails-asset-pipeline-vulnerability
  • report
    https://access.redhat.com/security/cve/CVE-2018-10905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-10905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-10905