Redhat Cfme Gemset vulnerabilities

1 vulnerability

Known vulnerabilities in Redhat Cfme Gemset, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2019-10159red hatcfme+20
EPSS score
0.70%
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.