Description
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | CloudForms | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat CloudForms 5 | ansible | 2.2.1.0-2.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | ansible-tower-setup +1 | 3.1.2-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | bubblewrap | 0.1.7-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | cfme +2 | 5.8.0.17-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | erlang | 19.0.4-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | freeipmi +4 | 1.5.1-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | google-config +1 | 2.0.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | libtomcrypt +2 | 1.17-23.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | libtommath +2 | 0.42.0-4.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | nginx +8 | 1:1.10.2-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | postgresql94 +9 | 9.4.11-2PGDG.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | prince | 9.0r2-10.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-crypto | 2.6.1-7.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-ecdsa | 0.11-4.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-httplib2 | 0.9.1-2.1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-keyczar | 0.71c-2.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-meld3 | 0.6.10-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-paramiko +1 | 1.15.2-3.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | python-passlib | 1.6.5-1.1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rabbitmq-server | 3.6.5-1.el7at | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-postgresql95-repmgr | 3.1.3-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-bcrypt +1 | 3.1.10-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-eventmachine +1 | 1.0.7-6.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-ffi +1 | 1.9.8-4.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-hamlit +1 | 2.7.2-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-http_parser.rb +1 | 0.6.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-json +1 | 2.0.2-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-linux_block_device +1 | 0.2.1-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-memory_buffer +1 | 0.1.0-2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-net_app_manageability +1 | 0.1.0-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-nio4r +2 | 1.2.1-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-nokogiri +1 | 1.6.8-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-ovirt-engine-sdk4 +1 | 4.1.5-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-pg +1 | 0.18.2-5.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-pkg-config +1 | 1.1.7-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-puma +1 | 3.3.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-redhat_access_cfme +1 | 1.1.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-redhat_access_lib | 0.1.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-rugged +1 | 0.25.0-b10.2.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-thin +1 | 1.7.0-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-unf_ext +1 | 0.0.7.1-3.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-websocket-driver +1 | 0.6.3-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | smem | 1.4-1.el7cf | RHSA-2017:1367 |
| Red Hat CloudForms 5 | sshpass | 1.06-1.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | supervisor | 3.1.3-3.el7 | RHSA-2017:1367 |
| Red Hat CloudForms 5 | wmi | 1.3.14-7.el7cf | RHSA-2017:1367 |
Advisories 1
- RHSA-2017:1367 Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- 98769 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2639
- RHSA-2017:1367 vendor-advisory
- 1038599 vdb-entry