CVE-2019-10159: Medium severity red hat cloudforms management engine gemset vulnerability
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10159?
CVE-2019-10159 is a vulnerability in cfme-gemset versions 5.10.4.3 and below and 5.9.9.3 and below that allows an attacker with access to an unprivileged user to access all VM migration logs.
What is the severity of CVE-2019-10159?
CVE-2019-10159 has a severity rating of 4.3 (medium).
How can an attacker exploit CVE-2019-10159?
An attacker can exploit CVE-2019-10159 by leveraging an improperly authorized migration log controller to access all VM migration logs.
What software versions are affected by CVE-2019-10159?
cfme-gemset versions 5.10.4.3 and below and 5.9.9.3 and below are affected by CVE-2019-10159.
Is there a fix for CVE-2019-10159?
Yes, a fix for CVE-2019-10159 is available. It is recommended to update to a version that is not vulnerable.