Skip to content
OpenAdvisories
High RHSA-2019:0600 1 CVE

Red Hat Security Advisory: CloudForms 4.6.9 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-amazon-smartstate 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-common 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-debuginfo 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-tools 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-debuginfo 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset 0:5.9.9.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset-debuginfo 0:5.9.9.1-1.el7cf

Vulnerabilities 1

  • High 7.5
    CVE-2018-16476

    Improper Access Control in activejob

    A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been…

    rails rails activejob Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1659223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1668730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1669583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1680960
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1683468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684196
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0600.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16476
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16476
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16476