CVE-2017-2664 in CloudForms Management Engineinformación

Resumen

por MITRE

CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Red Hat, Inc.

Reservar

2016-11-30

Divulgación

2018-07-26

Moderación

aceptado

Artículo

VDB-122205

CPE

listo

EPSS

0.00220

KEV

no

Actividades

muy bajo

Sector

Hospital, Education, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-2664
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-2664
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-2664/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!