Red Hat Security Advisory: CloudForms 4.7.7 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12439US | high7.8 | — | ||
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notesexternal
- https://access.redhat.com/errata/RHSA-2019:1833self
- https://access.redhat.com/security/updates/classification/#lowexternal
- 1695963external
- 1702497external
- 1721118external
- 1724715external
- 1725894external
remediations (66)
- Fixedansible-runner-0:1.3.4-2.el7ar.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-runner-0:1.3.4-2.el7ar.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-server-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-setup-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-ui-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-venv-ansible-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedansible-tower-venv-tower-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedbubblewrap-0:0.3.3-2.el7at.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedbubblewrap-0:0.3.3-2.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedbubblewrap-debuginfo-0:0.3.3-2.el7at.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-amazon-smartstate-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-amazon-smartstate-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-appliance-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-appliance-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-appliance-common-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-appliance-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-appliance-tools-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-gemset-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-gemset-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedcfme-gemset-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-hosted-engine-setup-0:1.0.20-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-hosted-engine-setup-0:1.0.20-1.el7ev.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-image-template-0:1.1.11-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-image-template-0:1.1.11-1.el7ev.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-manageiq-0:1.1.14-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-manageiq-0:1.1.14-1.el7ev.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-vm-infra-0:1.1.18-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedovirt-ansible-vm-infra-0:1.1.18-1.el7ev.src as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Fixedpython2-ansible-runner-0:1.3.4-2.el7ar.noarch as a component of CloudForms Management Engine 5.10
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:1833 - Workaroundansible-runner-0:1.3.4-2.el7ar.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-runner-0:1.3.4-2.el7ar.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-server-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-setup-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-ui-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-venv-ansible-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundansible-tower-venv-tower-0:3.5.0-1.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundbubblewrap-0:0.3.3-2.el7at.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundbubblewrap-0:0.3.3-2.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundbubblewrap-debuginfo-0:0.3.3-2.el7at.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-amazon-smartstate-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-amazon-smartstate-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-appliance-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-appliance-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-appliance-common-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-appliance-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-appliance-tools-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-gemset-0:5.10.7.1-1.el7cf.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-gemset-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundcfme-gemset-debuginfo-0:5.10.7.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-hosted-engine-setup-0:1.0.20-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-hosted-engine-setup-0:1.0.20-1.el7ev.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-image-template-0:1.1.11-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-image-template-0:1.1.11-1.el7ev.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-manageiq-0:1.1.14-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-manageiq-0:1.1.14-1.el7ev.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-vm-infra-0:1.1.18-1.el7ev.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundovirt-ansible-vm-infra-0:1.1.18-1.el7ev.src as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Workaroundpython2-ansible-runner-0:1.3.4-2.el7ar.noarch as a component of CloudForms Management Engine 5.10
The default setting of `fs.protected_symlinks = 1` prevents any Confidentiality or Integrity impact from exploiting this vulnerability, reducing its rating to Low severity (4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan