CVE-2017-2639
It was found that CloudForms does not verify that the server hostname matches the domain name in...
6.5 Medium
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
1.12%Up 0.1 points since Apr 14, 2021
What each source reports
CVE List Score used
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
- Record
CVE-2017-2639- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
EUVDEUVD-2017-11799
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
- Record
EUVD-2017-11799- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gmm6-vqjm-5p45
It was found that CloudForms does not verify that the server hostname matches the domain name in...
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
- Record
GHSA-gmm6-vqjm-5p45- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
NVD
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
- Record
CVE-2017-2639- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSVRHSA-2017:1367
Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update
- Record
RHSA-2017:1367- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ansibleRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.2.1.0-2.el7 | 0:2.2.1.0-2.el7 |
ansible-tower-serverRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.2-1.el7at | 0:3.1.2-1.el7at |
ansible-tower-setupRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.2-1.el7at | 0:3.1.2-1.el7at |
bubblewrapRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.7-1.el7 | 0:0.1.7-1.el7 |
bubblewrap-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.7-1.el7 | 0:0.1.7-1.el7 |
cfmeRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:5.8.0.17-1.el7cf | 0:5.8.0.17-1.el7cf |
cfme-applianceRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:5.8.0.17-1.el7cf | 0:5.8.0.17-1.el7cf |
cfme-appliance-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:5.8.0.17-1.el7cf | 0:5.8.0.17-1.el7cf |
cfme-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:5.8.0.17-1.el7cf | 0:5.8.0.17-1.el7cf |
cfme-gemsetRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:5.8.0.17-1.el7cf | 0:5.8.0.17-1.el7cf |
Show 120 moreShow less
| Package | Affected | Fixed |
|---|---|---|
erlangRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:19.0.4-1.el7at | 0:19.0.4-1.el7at |
erlang-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:19.0.4-1.el7at | 0:19.0.4-1.el7at |
freeipmiRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
freeipmi-bmc-watchdogRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
freeipmi-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
freeipmi-develRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
freeipmi-ipmidetectdRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
freeipmi-ipmiseldRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.5.1-2.el7cf | 0:1.5.1-2.el7cf |
google-compute-engineRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.0.0-1.el7cf | 0:2.0.0-1.el7cf |
google-configRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.0.0-1.el7cf | 0:2.0.0-1.el7cf |
libtomcryptRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.17-23.el7 | 0:1.17-23.el7 |
libtomcrypt-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.17-23.el7 | 0:1.17-23.el7 |
libtomcrypt-develRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.17-23.el7 | 0:1.17-23.el7 |
libtomcrypt-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.17-23.el7 | 0:1.17-23.el7 |
libtommathRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.42.0-4.el7 | 0:0.42.0-4.el7 |
libtommath-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.42.0-4.el7 | 0:0.42.0-4.el7 |
libtommath-develRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.42.0-4.el7 | 0:0.42.0-4.el7 |
libtommath-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.42.0-4.el7 | 0:0.42.0-4.el7 |
nginxRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-all-modulesRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-filesystemRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-http-geoipRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-http-image-filterRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-http-perlRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-http-xslt-filterRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-mailRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
nginx-mod-streamRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 1:1.10.2-1.el7at | 1:1.10.2-1.el7at |
postgresql94Red Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-contribRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-develRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-docsRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-libsRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-plperlRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-plpythonRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-pltclRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-serverRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
postgresql94-testRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.4.11-2PGDG.el7at | 0:9.4.11-2PGDG.el7at |
princeRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:9.0r2-10.el7cf | 0:9.0r2-10.el7cf |
python-cryptoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.6.1-7.el7 | 0:2.6.1-7.el7 |
python-crypto-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.6.1-7.el7 | 0:2.6.1-7.el7 |
python-ecdsaRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.11-4.el7 | 0:0.11-4.el7 |
python-httplib2Red Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.9.1-2.1.el7 | 0:0.9.1-2.1.el7 |
python-keyczarRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.71c-2.el7 | 0:0.71c-2.el7 |
python-meld3Red Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.10-1.el7 | 0:0.6.10-1.el7 |
python-meld3-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.10-1.el7 | 0:0.6.10-1.el7 |
python-paramikoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.15.2-3.el7 | 0:1.15.2-3.el7 |
python-paramiko-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.15.2-3.el7 | 0:1.15.2-3.el7 |
python-passlibRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.6.5-1.1.el7 | 0:1.6.5-1.1.el7 |
rabbitmq-serverRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.6.5-1.el7at | 0:3.6.5-1.el7at |
rh-postgresql95-postgresql-pglogicalRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el7cf | 0:1.2.1-1.el7cf |
rh-postgresql95-postgresql-pglogical-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el7cf | 0:1.2.1-1.el7cf |
rh-postgresql95-repmgrRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.3-2.el7cf | 0:3.1.3-2.el7cf |
rh-postgresql95-repmgr-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.3-2.el7cf | 0:3.1.3-2.el7cf |
rh-ruby23-rubygem-bcryptRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.10-3.el7cf | 0:3.1.10-3.el7cf |
rh-ruby23-rubygem-bcrypt-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.10-3.el7cf | 0:3.1.10-3.el7cf |
rh-ruby23-rubygem-bcrypt-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.10-3.el7cf | 0:3.1.10-3.el7cf |
rh-ruby23-rubygem-eventmachineRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-6.el7cf | 0:1.0.7-6.el7cf |
rh-ruby23-rubygem-eventmachine-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-6.el7cf | 0:1.0.7-6.el7cf |
rh-ruby23-rubygem-eventmachine-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-6.el7cf | 0:1.0.7-6.el7cf |
rh-ruby23-rubygem-ffiRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.9.8-4.el7cf | 0:1.9.8-4.el7cf |
rh-ruby23-rubygem-ffi-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.9.8-4.el7cf | 0:1.9.8-4.el7cf |
rh-ruby23-rubygem-ffi-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.9.8-4.el7cf | 0:1.9.8-4.el7cf |
rh-ruby23-rubygem-hamlitRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.7.2-1.el7cf | 0:2.7.2-1.el7cf |
rh-ruby23-rubygem-hamlit-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.7.2-1.el7cf | 0:2.7.2-1.el7cf |
rh-ruby23-rubygem-hamlit-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.7.2-1.el7cf | 0:2.7.2-1.el7cf |
rh-ruby23-rubygem-http_parser.rbRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el7cf | 0:0.6.0-1.el7cf |
rh-ruby23-rubygem-http_parser.rb-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el7cf | 0:0.6.0-1.el7cf |
rh-ruby23-rubygem-http_parser.rb-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el7cf | 0:0.6.0-1.el7cf |
rh-ruby23-rubygem-jsonRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.0.2-1.el7cf | 0:2.0.2-1.el7cf |
rh-ruby23-rubygem-json-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.0.2-1.el7cf | 0:2.0.2-1.el7cf |
rh-ruby23-rubygem-json-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:2.0.2-1.el7cf | 0:2.0.2-1.el7cf |
rh-ruby23-rubygem-linux_block_deviceRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el7cf | 0:0.2.1-1.el7cf |
rh-ruby23-rubygem-linux_block_device-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el7cf | 0:0.2.1-1.el7cf |
rh-ruby23-rubygem-linux_block_device-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el7cf | 0:0.2.1-1.el7cf |
rh-ruby23-rubygem-memory_bufferRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el7cf | 0:0.1.0-2.el7cf |
rh-ruby23-rubygem-memory_buffer-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el7cf | 0:0.1.0-2.el7cf |
rh-ruby23-rubygem-memory_buffer-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el7cf | 0:0.1.0-2.el7cf |
rh-ruby23-rubygem-net_app_manageabilityRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-3.el7cf | 0:0.1.0-3.el7cf |
rh-ruby23-rubygem-net_app_manageability-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-3.el7cf | 0:0.1.0-3.el7cf |
rh-ruby23-rubygem-net_app_manageability-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-3.el7cf | 0:0.1.0-3.el7cf |
rh-ruby23-rubygem-nio4rRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el7cf | 0:1.2.1-1.el7cf |
rh-ruby23-rubygem-nio4r-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el7cf | 0:1.2.1-1.el7cf |
rh-ruby23-rubygem-nio4r-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el7cf | 0:1.2.1-1.el7cf |
rh-ruby23-rubygem-nokogiriRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.6.8-1.el7cf | 0:1.6.8-1.el7cf |
rh-ruby23-rubygem-nokogiri-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.6.8-1.el7cf | 0:1.6.8-1.el7cf |
rh-ruby23-rubygem-nokogiri-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.6.8-1.el7cf | 0:1.6.8-1.el7cf |
rh-ruby23-rubygem-ovirt-engine-sdk4Red Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:4.1.5-1.el7cf | 0:4.1.5-1.el7cf |
rh-ruby23-rubygem-ovirt-engine-sdk4-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:4.1.5-1.el7cf | 0:4.1.5-1.el7cf |
rh-ruby23-rubygem-ovirt-engine-sdk4-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:4.1.5-1.el7cf | 0:4.1.5-1.el7cf |
rh-ruby23-rubygem-pgRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.18.2-5.el7cf | 0:0.18.2-5.el7cf |
rh-ruby23-rubygem-pg-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.18.2-5.el7cf | 0:0.18.2-5.el7cf |
rh-ruby23-rubygem-pg-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.18.2-5.el7cf | 0:0.18.2-5.el7cf |
rh-ruby23-rubygem-pkg-configRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.1.7-1.el7cf | 0:1.1.7-1.el7cf |
rh-ruby23-rubygem-pkg-config-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.1.7-1.el7cf | 0:1.1.7-1.el7cf |
rh-ruby23-rubygem-pumaRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.3.0-1.el7cf | 0:3.3.0-1.el7cf |
rh-ruby23-rubygem-puma-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.3.0-1.el7cf | 0:3.3.0-1.el7cf |
rh-ruby23-rubygem-puma-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.3.0-1.el7cf | 0:3.3.0-1.el7cf |
rh-ruby23-rubygem-redhat_access_cfmeRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.1.0-1.el7cf | 0:1.1.0-1.el7cf |
rh-ruby23-rubygem-redhat_access_cfme-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.1.0-1.el7cf | 0:1.1.0-1.el7cf |
rh-ruby23-rubygem-redhat_access_libRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.1.0-1.el7cf | 0:0.1.0-1.el7cf |
rh-ruby23-rubygem-ruggedRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.25.0-b10.2.el7cf | 0:0.25.0-b10.2.el7cf |
rh-ruby23-rubygem-rugged-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.25.0-b10.2.el7cf | 0:0.25.0-b10.2.el7cf |
rh-ruby23-rubygem-rugged-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.25.0-b10.2.el7cf | 0:0.25.0-b10.2.el7cf |
rh-ruby23-rubygem-thinRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.7.0-1.el7cf | 0:1.7.0-1.el7cf |
rh-ruby23-rubygem-thin-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.7.0-1.el7cf | 0:1.7.0-1.el7cf |
rh-ruby23-rubygem-thin-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.7.0-1.el7cf | 0:1.7.0-1.el7cf |
rh-ruby23-rubygem-unf_extRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.0.7.1-3.el7cf | 0:0.0.7.1-3.el7cf |
rh-ruby23-rubygem-unf_ext-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.0.7.1-3.el7cf | 0:0.0.7.1-3.el7cf |
rh-ruby23-rubygem-unf_ext-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.0.7.1-3.el7cf | 0:0.0.7.1-3.el7cf |
rh-ruby23-rubygem-websocket-driverRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.3-1.el7cf | 0:0.6.3-1.el7cf |
rh-ruby23-rubygem-websocket-driver-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.3-1.el7cf | 0:0.6.3-1.el7cf |
rh-ruby23-rubygem-websocket-driver-docRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:0.6.3-1.el7cf | 0:0.6.3-1.el7cf |
smemRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.4-1.el7cf | 0:1.4-1.el7cf |
sshpassRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.06-1.el7 | 0:1.06-1.el7 |
sshpass-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.06-1.el7 | 0:1.06-1.el7 |
supervisorRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:3.1.3-3.el7 | 0:3.1.3-3.el7 |
wmiRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.3.14-7.el7cf | 0:1.3.14-7.el7cf |
wmi-debuginfoRed Hat:cloudforms_managementengine:5.8::el7 From an advisory covering 2 CVEs |
before 0:1.3.14-7.el7cf | 0:1.3.14-7.el7cf |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-2639 is a medium vulnerability (CVSS 6.5) in [unknown] Cloudforms, published July 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.12%, the 66th percentile. No source names a fixed version.
References
securityfocus.com/bid/98769
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2639
access.redhat.com/errata/RHSA-2017:1367
securitytracker.com/id/1038599
nvd.nist.gov/vuln/detail/CVE-2017-2639
Show 194 moreShow less
github.com/advisories/GHSA-gmm6-vqjm-5p45
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1367.json
cve.org/CVERecord?id=CVE-2016-4457
This page doesn't list everything
Left out here: 306 references. The JSON record has them.