CVE-2026-41859

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials Basic auth header or UAA client secret and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials grant administrative director access...

PT-2022-7802

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms version 5.x Description The issue is related to an insecure configuration for certificate verification, where the setting http.verify mode is set to OpenSSL::SSL::VERIFY NONE. This may lead to a verification bypass...