Authorization Bypass

conductor is vulnerable to authorization bypass. The web-based management console allowed unprivileged users to modify their quota for the number of instances they are allowed to run. An unprivileged user could use this flaw to monopolize resources and run more instances than intended...

Moderate: Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update

CloudForms Cloud Engine 1.1.2 is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the...