CVE-2019-10159

State: Published
Severity: 4.3 Medium
Published: Jun 14, 2019
Updated: Aug 4, 2024
Reserved: Mar 27, 2019

Description

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.

Scores

CVSS	Score	Vector	Source
3.0	4.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	redhat

Weaknesses

CWE-285

Affected Products

Product	Versions
cfmeRed Hat	5.10.4.3 and below, 5.9.9.3 and belowAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10159
RHSA-2019:2466vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.