cbcvebase.
CVE-2017-2639
published 2018-07-27

CVE-2017-2639: It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with…

high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.

Affected

2 ranges
VendorProductVersion rangeFixed in
redhatcloudforms——
redhatcloudforms_management_engine——