What’s Vulnerable › Vulnerabilities

CVE-2019-10159

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-14 · updated 2026-06-17
• Weakness: CWE-285

Description

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.

Affected products

• RedHat Cfme-Gemset: from 5.9.0.22 through 5.9.9.3; from 5.10.0.33 through 5.10.4.3
• CloudForms: 4.7

References

• https://access.redhat.com/errata/RHSA-2019:2466
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10159
• https://access.redhat.com/errata/RHSA-2019:2466
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10159

Get alerted when CVE-2019-10159 or the next vulnerability affects your stack