Skip to content
OpenAdvisories
Unscored RHSA-2020:3358 8 CVEs

Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme 0:5.11.7.3-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-gemset 0:5.11.7.3-1.el8cf

Vulnerabilities 8

  • Unscored —
    CVE-2020-10777

    A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use thi…

  • Unscored —
    CVE-2020-10778

    In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled …

  • Unscored —
    CVE-2020-10779

    Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypa…

  • Unscored —
    CVE-2020-10780

    Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as…

  • Unscored —
    CVE-2020-10783

    Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group…

  • Unscored —
    CVE-2020-14296

    Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible …

  • Unscored —
    CVE-2020-14324

    A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band O…

  • Unscored —
    CVE-2020-14325

    Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious a…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1671330
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1713212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1734629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1734630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1741310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1753586
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1757128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1770197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1809033
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810477
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1826410
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1832278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1834219
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1836125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1836158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1837993
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1838704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1839770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1846281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847410
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847628
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850952
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855739
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3358.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10777
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10777