Red Hat Security Advisory: CloudForms 4.6.8 security, bug fix and enhancement update

Fixed packages 10

Vulnerabilities 1

• Medium 6.1
  CVE-2018-11627

  Sinatra Cross-site Scripting vulnerability

  Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

  sinatra ruby-sinatra Ubuntu RubyGems
  May 31, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585218
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641669
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641812
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1650152
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658480
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1665284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1667948
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670202
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0315.json
• report
  https://access.redhat.com/security/cve/CVE-2018-11627
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-11627
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-11627