Skip to content
OpenAdvisories
Unscored RHSA-2020:3574 4 CVEs

Red Hat Security Advisory: CloudForms 4.7.16 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-common 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-debuginfo 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-appliance-tools 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-debuginfo 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-gemset 0:5.10.16.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.10::el7 cfme-gemset-debuginfo 0:5.10.16.0-1.el7cf

Vulnerabilities 4

  • Unscored —
    CVE-2020-10778

    In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled …

  • Unscored —
    CVE-2020-10783

    Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group…

  • Unscored —
    CVE-2020-14324

    A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band O…

  • Unscored —
    CVE-2020-14325

    Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious a…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847628
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855739
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3574.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10778
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10778
  • report
    https://access.redhat.com/security/cve/CVE-2020-10783
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10783
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10783
  • report
    https://access.redhat.com/security/cve/CVE-2020-14324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14324
  • report
    https://access.redhat.com/security/cve/CVE-2020-14325
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14325
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14325
  • article
    https://github.com/ManageIQ/manageiq/security/advisories/GHSA-84f5-5g5v-g8vr