Description
CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat CloudForms 5 | ansible | 2.2.1.0-2.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | ansible-tower-setup +1 | 3.1.2-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | bubblewrap | 0.1.7-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | cfme +2 | 5.7.3.2-1.el7cf | RHSA-2017:1601, RHSA-2017:1367 |
| Red Hat CloudForms 5 | erlang | 19.0.4-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | freeipmi +4 | 1.5.1-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | google-config +1 | 2.0.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | libtomcrypt +2 | 1.17-23.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | libtommath +2 | 0.42.0-4.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | nginx +8 | 1:1.10.2-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | postgresql94 +9 | 9.4.11-2PGDG.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | prince | 9.0r2-10.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-crypto | 2.6.1-7.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-ecdsa | 0.11-4.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-httplib2 | 0.9.1-2.1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-keyczar | 0.71c-2.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-meld3 | 0.6.10-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-paramiko +1 | 1.15.2-3.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-passlib | 1.6.5-1.1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rabbitmq-server | 3.6.5-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-postgresql95-repmgr | 3.1.3-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-bcrypt +1 | 3.1.10-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-eventmachine +1 | 1.0.7-6.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-ffi +1 | 1.9.8-4.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-hamlit +1 | 2.7.2-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-http_parser.rb +1 | 0.6.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-json +1 | 2.0.2-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-linux_block_device +1 | 0.2.1-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-memory_buffer +1 | 0.1.0-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-net_app_manageability +1 | 0.1.0-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-nio4r +2 | 1.2.1-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-nokogiri +1 | 1.6.8-1.el7cf | RHSA-2017:1601, RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-ovirt-engine-sdk4 +1 | 4.1.5-1.el7cf | RHSA-2017:1601, RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-pg +1 | 0.18.2-5.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-pkg-config +1 | 1.1.7-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-puma +1 | 3.3.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-redhat_access_cfme +1 | 1.1.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-redhat_access_lib | 0.1.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-rugged +1 | 0.25.0-b10.2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-thin +1 | 1.7.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-unf_ext +1 | 0.0.7.1-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-websocket-driver +1 | 0.6.3-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | smem | 1.4-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | sshpass | 1.06-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | supervisor | 3.1.3-3.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | wmi | 1.3.14-7.el7cf | RHSA-2017:1367 |
Advisories 2
- RHSA-2017:1601 Red Hat Security Advisory: CFME 5.7.3 security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2017:1367 Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- RHSA-2017:1601 vendor-advisory
- RHSA-2017:1367 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1341308
- 1038599 vdb-entry