Critical: Red Hat Security Advisory: CloudForms 4.7.16 security, bug fix and enhancement update

🗓️ 27 Aug 2020 16:03:08Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 50 Views

Red Hat CloudForms Management Engine - Security, Fix and Enhancement

Reporter	Title	Published	Views	Family All 63
BDU FSTEC	The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, arises from the lack of measures taken to eliminate special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary commands.	12 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, relates to authentication errors. This vulnerability allows an attacker to create existing or new users for access control based on roles and groups.	12 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, related to access control deficiencies, allows attackers to increase their privileges.	12 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, stems from deficiencies in its authentication mechanism. This allows attackers to edit widgets that are only intended for reading purposes.	12 Aug 202000:00	–	bdu_fstec
Circl	CVE-2020-10778	11 Aug 202016:55	–	circl
Circl	CVE-2020-10783	11 Aug 202016:55	–	circl
Circl	CVE-2020-14324	11 Aug 202018:55	–	circl
Circl	CVE-2020-14325	11 Aug 202016:55	–	circl
CNVD	Red Hat CloudForms Path Traversal Vulnerability	5 Aug 202000:00	–	cnvd
CNVD	Red Hat CloudForms OS Command Injection Vulnerability	5 Aug 202000:00	–	cnvd

Source	Link
access	www.access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

26 Jun 2026 22:44Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.1

CVSS 26.5

EPSS0.02515

cloudforms management engine ruby on rails security fix command injection user impersonation business logic bypass access control bug fix enhancement update cve-2020-14324 cve-2020-14325 cve-2020-10778 cve-2020-10783 cvss score