Lucene search
PRIOn knowledge basePRION:CVE-2017-7497HistoryJul 27, 2018 - 3:29 p.m.
Spoofing
2018-07-2715:29:00
PRIOn knowledge base
www.prio-n.com
3
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloudforms_management_engine | eq | 5.7.2 | |
| cloudforms_management_engine | eq | 5.8.0 |
Related
nvd
nvd
CVE-2017-7497
2018-07-27 15:29:00
cve
cve
CVE-2017-7497
2018-07-27 15:29:00
redhatcve
redhatcve
CVE-2017-7497
2017-05-11 16:49:30
veracode
veracode
Remote Code Execution
2019-05-02 06:28:53
cvelist
cvelist
CVE-2017-7497
2018-07-27 15:00:00
redhat
redhat