{"id":"CVE-2018-10905","aliases":["EUVD-2018-2961","GHSA-jjjj-c3mp-q822","RHSA-2018:2561","RHSA-2018:2745"],"status":"published","title":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby...","description":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00474,"percentile":0.41233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-78"],"published":"2018-07-24T13:00:00Z","modified":"2026-07-01T10:04:35Z","affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-amazon-smartstate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.4.7-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"rh-postgresql95-postgresql-pglogical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"rh-postgresql95-postgresql-pglogical-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"rh-ruby23-rubygem-redhat_access_cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"rh-ruby23-rubygem-redhat_access_cfme-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.8-1.el7at"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.8-1.el7at"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5.1-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5.1-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5.1-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5.1-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5.1-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"rh-postgresql95-postgresql-pglogical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-2.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"rh-postgresql95-postgresql-pglogical-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-2.el7cf"}]}],"bundled":2}],"products":[{"vendor":"[unknown]","product":"cfme"},{"vendor":"red hat","product":"cfme"},{"vendor":"redhat","product":"cloudforms"},{"vendor":"redhat","product":"cloudforms_management_engine"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10905","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2745","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2561","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10905","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jjjj-c3mp-q822"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1565259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618219","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2561.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3760","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3760","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3760","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2018/06/19/2","tags":["article"]},{"url":"https://blog.heroku.com/rails-asset-pipeline-vulnerability","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10905","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10905","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.5/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1586214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626502","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2745.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-10905","description":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-08-05T07:54:36.246Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-2961","description":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-08-05T07:54:36Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:57.009215Z"}],"ghsa":[{"id":"GHSA-jjjj-c3mp-q822","title":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby...","description":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.","status":"published","published":"2022-05-13T01:34:54Z","modified":"2023-02-01T05:08:26Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:50:46.174982Z"}],"nvd":[{"id":"CVE-2018-10905","description":"CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.","status":"published","published":"2018-07-24T13:29:00.447Z","modified":"2026-06-17T01:34:53.323Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284","CWE-78"],"updated_at":"2026-11-02T14:04:33.865124Z"}],"osv":[{"id":"RHSA-2018:2561","title":"Red Hat Security Advisory: CloudForms 4.6.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T01:40:26Z","modified":"2026-07-01T10:04:18Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2745","title":"Red Hat Security Advisory: CloudForms 4.5.5 security, bug fix and enhancement update","status":"published","published":"2024-09-16T01:40:20Z","modified":"2026-07-01T10:04:35Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"}]}}