supervisor vulnerabilities (Red Hat)

16 vulnerabilities.

• supervisor Red Hat A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a... CVE-2017-12148 8.4 HighJuly 27, 2018
• supervisor Red Hat A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... CVE-2017-15125 6.5 MediumJuly 27, 2018
• supervisor Red Hat It was found that CloudForms does not verify that the server hostname matches the domain name in... CVE-2017-2639 6.5 MediumJuly 27, 2018
• supervisor Red Hat Sinatra Cross-site Scripting vulnerability CVE-2018-11627 Fix available 6.1 MediumMay 31, 2018
• supervisor Red Hat rails-html-sanitizer Cross-site Scripting vulnerability CVE-2018-3741 Fix available 6.1 MediumMarch 30, 2018
• supervisor Red Hat Prototype Pollution in hoek CVE-2018-3728 Fix available 8.8 HighMarch 30, 2018
• supervisor Red Hat Cross-site Scripting in loofah CVE-2018-8048 Fix available 6.1 MediumMarch 21, 2018
• supervisor Red Hat Regular Expression Denial of Service in tough-cookie CVE-2017-15010 Fix available 7.5 HighOctober 3, 2017
• supervisor Red Hat It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user.... CVE-2017-7554 6.1 MediumSeptember 28, 2017
• supervisor Red Hat The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)... CVE-2017-7553 6.3 MediumSeptember 28, 2017
• supervisor Red Hat A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x... CVE-2017-7552 9.8 CriticalSeptember 28, 2017
• supervisor Red Hat A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... CVE-2017-1000117 Public exploitFix available EPSS 77.8% 8.8 HighAugust 10, 2017
• supervisor Red Hat Incorrect Default Permissions in Supervisor CVE-2017-11610 Public exploitFix available EPSS 87.5% 8.8 HighJuly 31, 2017
• supervisor Red Hat CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. CVE-2016-4457 7.5 HighJune 8, 2017
• supervisor Red Hat Nokogiri is vulnerable to XML External Entity (XXE) attack CVE-2012-6685 Fix available 7.5 HighMay 27, 2015
• supervisor Red Hat i18n gem Cross-site Scripting vulnerability CVE-2013-4492 Fix available 4.3 MediumDecember 7, 2013