Redhat Cfme-Gemset vulnerabilities

1 known vulnerability affecting redhat/cfme-gemset.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-10159MEDIUMCVSS 4.3≥ 5.9.0.22, ≤ 5.9.9.3≥ 5.10.0.33, ≤ 5.10.4.32019-06-14

CVE-2019-10159 [MEDIUM] CWE-285 CVE-2019-10159: cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.