CVE-2017-2632

Description

A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.

CVSS Metrics

• v3.0•MEDIUM•Score: 4.9CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
• v2.0•MEDIUM•Score: 4AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.29%• Percentile: 53%

Techniques & Countermeasures

• CWE-863•Incorrect Authorization

  The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

• CWE-285•Improper Authorization

  The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Affected Systems

• red hat•cfme

  5.7.1.3

• redhat•cloudforms

  4.2

• redhat•cloudforms_management_engine

  < 5.7.1.3

References (3)

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2632
• http://www.securityfocus.com/bid/96478
• http://rhn.redhat.com/errata/RHSA-2017-0320.html