{"id":"RHSA-2018:2561","summary":"Red Hat Security Advisory: CloudForms 4.6.4 security, bug fix, and enhancement update","modified":"2026-07-01T10:04:18Z","published":"2024-09-16T01:40:26Z","upstream":["CVE-2018-10905","CVE-2018-3760"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2561"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1565259"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588527"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591494"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591495"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591496"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591497"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593058"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595416"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595445"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595447"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595448"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595450"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595451"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595454"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595456"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595461"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595776"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598528"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598532"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598873"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599350"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599353"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600191"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600738"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601587"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601589"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602190"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603022"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603029"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603031"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603058"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603210"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607441"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608844"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610055"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610425"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610685"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611002"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611660"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612062"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612856"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612889"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613295"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613387"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613757"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615633"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618219"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2561.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-3760"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-3760"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3760"},{"type":"ARTICLE","url":"http://www.openwall.com/lists/oss-security/2018/06/19/2"},{"type":"ARTICLE","url":"https://blog.heroku.com/rails-asset-pipeline-vulnerability"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-10905"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-10905"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10905"}],"affected":[{"package":{"name":"cfme","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-amazon-smartstate","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-amazon-smartstate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-appliance","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-appliance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-appliance-common","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-appliance-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-appliance-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-appliance-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-appliance-tools","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-appliance-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-gemset","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-gemset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"cfme-gemset-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/cfme-gemset-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"rh-postgresql95-postgresql-pglogical","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"rh-postgresql95-postgresql-pglogical-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"rh-ruby23-rubygem-redhat_access_cfme","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-redhat_access_cfme"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}},{"package":{"name":"rh-ruby23-rubygem-redhat_access_cfme-doc","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-redhat_access_cfme-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2561.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}