CVE:CVE-2019-10159
CNNVD:CNNVD-201906-561
cfme-gemset是一个迁移日志控制器。
cfme-gemset 5.10.4.3及之前版本和5.9.9.3及之前版本中存在授权问题漏洞。该漏洞源于网络系统或产品的日志文件非正常输出。
solution:Upgrade redhat cfme-gemset to a higher version than 5.9.9.3,5.10.4.3,and avoid the version [5.9.0.22,5.9.9.3],[5.10.0.33,5.10.4.3]; Upgrade redhat cloudforms to a higher version than 4.7,and avoid the version 4.7