Skip to content
OpenAdvisories
Medium RHSA-2019:2466 1 CVE

Red Hat Security Advisory: CloudForms 4.7.8 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Feb 21, 2026

Fixed packages 18

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower-server 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower-setup 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower-ui 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower-venv-ansible 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 ansible-tower-venv-tower 0:3.5.1-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-amazon-smartstate 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-common 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-debuginfo 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-tools 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-debuginfo 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-gemset 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-gemset-debuginfo 0:5.10.8.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 rubygem-nokogiri 0:1.8.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 rubygem-nokogiri-debuginfo 0:1.8.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 rubygem-nokogiri-doc 0:1.8.5-1.el7cf

Vulnerabilities 1

  • Medium 4.3

    cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorizat…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1718080
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1723833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1726313
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1727443
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728403
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731237
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731992
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732117
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733375
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1734122
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2466.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10159
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10159
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10159