The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:4134 advisory.

    Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the     challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a     model-view-controller (MVC) framework for web application development. Action Pack implements the     controller and the view components.

    Security Fix(es):

    * cfme-gemset: CloudForms: Cross Site Request Forgery in API notifications (CVE-2020-14369)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    This update fixes various bugs and adds enhancements. Documentation for these changes is available from     the Release Notes document linked to in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

リモートRedhat Enterprise Linux 8ホストにインストールされているパッケージは、RHSA-2020: 4134のアドバイザリ。

  - CloudForms: API通知におけるクロスサイトリクエスト偽造（CVE-2020-14369）

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2020: 4134 公告中所提及的一個弱點影響。

  - CloudForms：API 通知中存在跨網站要求偽造 (CVE-2020-14369)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2020: 4134 公告中提及的漏洞的影响。

  - CloudForms：API 通知中存在跨站请求伪造 (CVE-2020-14369)

请注意，Nessus 尚未测试此问题，而是只依靠应用程序自我报告的版本号。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
141086	RHEL 8 : CloudForms 5.0.8 (RHSA-2020:4134)	Nessus	Red Hat Local Security Checks	2020/9/30	2024/11/7	medium
141086	RHEL 8: CloudForms 5.0.8 （RHSA-2020: 4134)	Nessus	Red Hat Local Security Checks	2020/9/30	2024/11/7	medium
141086	RHEL 8：CloudForms 5.0.8 (RHSA-2020: 4134)	Nessus	Red Hat Local Security Checks	2020/9/30	2024/11/7	medium
141086	RHEL 8：CloudForms 5.0.8 (RHSA-2020: 4134)	Nessus	Red Hat Local Security Checks	2020/9/30	2024/11/7	medium

検出

プラグインの検索

medium

medium

medium

medium