CVE-2017-2632 in CloudForms
Summary
A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.