EUVD-2016-7928

Malware in sbrugna...

CVE-2016-7047: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access...

PT-2018-4970

Name of the Vulnerable Software and Affected Versions CloudForms versions prior to 5.6.3.0 CloudForms versions prior to 5.7.3.1 CloudForms versions prior to 5.8.1.2 Description A flaw was found in the CloudForms API. A user with permissions to use the MiqReportResults capability within the API...

cfme: API leaks any MiqReportResult

A flaw was found in the CloudForms API. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access...