title: Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update
description: EVM: CSRF postgresql: Insecure switch parsing postgresql: Improper randomization of pgcrypto functions (requiring random seed) postgresql: Improper user privilege check for on-line backups 2: static secret_token.rb value 2: miq_policy/explorer SQL injection interface: Ruby code injection CloudForms: user password stored in recoverable format
cpes: cpe:/a:redhat:cloudforms_managementengine:5::el6