CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | CVE-2017-2664 | 11 Oct 201904:20 | – | redhatcve |
![]() | CVE-2017-2664 | 26 Jul 201814:00 | – | cvelist |
![]() | CVE-2017-2664 | 26 Jul 201814:29 | – | nvd |
![]() | RHEL 7 : Red Hat CloudForms (RHSA-2017:3484) | 27 Apr 202400:00 | – | nessus |
![]() | Code injection | 26 Jul 201814:29 | – | prion |
![]() | Privilege Escalation | 15 Jan 201909:20 | – | veracode |
![]() | (RHSA-2017:3484) Important: Red Hat CloudForms security, bug fix, and enhancement update | 18 Dec 201720:10 | – | redhat |
![]() | (RHSA-2017:1758) Important: Red Hat CloudForms security, bug fix, and enhancement update | 2 Aug 201717:05 | – | redhat |
![]() | RHSA-2017:3484 Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update | 16 Sep 202400:22 | – | osv |
![]() | RHSA-2017:1758 Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update | 16 Sep 202400:22 | – | osv |
[
{
"product": "CloudForms",
"vendor": "Red Hat",
"versions": [
{
"status": "affected",
"version": "5.7.3"
},
{
"status": "affected",
"version": "5.8.1"
}
]
}
]
Source | Link |
---|---|
access | www.access.redhat.com/errata/RHSA-2017:1758 |
access | www.access.redhat.com/errata/RHSA-2017:3484 |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
securityfocus | www.securityfocus.com/bid/100148 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo