CVE-2016-4457

CloudForms Management Engine (CFME) is affected by CVE-2016-4457 due to a default SSL/TLS certificate used by the web server. Red Hat RHSA-2017:1367 documents that if an attacker could man-in-the-middle during install, they could obtain the private key uploaded with the new certificate, enabling ...

CVE-2016-3702

CVE-2016-3702: Padding oracle flaw in Red Hat CloudForms Management Engine (CFME) 5 enables remote attackers to obtain sensitive cleartext information. Affected component and exact root cause are described as a padding oracle vulnerability; no specific exploit details or remediation are provided ...