4
CVSSv2

CVE-2019-10159

Published: 14/06/2019 Updated: 12/02/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat cfme-gemset

redhat cloudforms 4.7

Vendor Advisories

Synopsis Moderate: CloudForms 478 security, bug fix and enhancement update Type/Severity Security Advisory: Moderate Topic An update is now available for CloudForms Management Engine 510Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...