Design/Logic Flaw

2018-09-1113:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.2%

JSON

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.

CPENameOperatorVersion
cloudformseq4.5
cloudformseq4.2
cloudforms_management_enginege5.8
cloudforms_management_enginelt5.8.1.2
cloudforms_management_enginege5.6
cloudforms_management_enginelt5.6.3.0
cloudforms_management_enginege5.7
cloudforms_management_enginelt5.7.3.1

Name	Operator	Version
cloudforms	eq	4.5
cloudforms	eq	4.2
cloudforms_management_engine	ge	5.8
cloudforms_management_engine	lt	5.8.1.2
cloudforms_management_engine	ge	5.6
cloudforms_management_engine	lt	5.6.3.0
cloudforms_management_engine	ge	5.7
cloudforms_management_engine	lt	5.7.3.1