CVE-2016-7047

EPSS 1.33%
Veröffentlicht 11.09.2018 13:29:00
Zuletzt bearbeitet 21.11.2024 02:57:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 7

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Cloudforms Version4.2

Redhat ≫ Cloudforms Version4.5

Redhat ≫ Cloudforms Management Engine Version >= 5.6 < 5.6.3.0

Redhat ≫ Cloudforms Management Engine Version >= 5.7 < 5.7.3.1

Redhat ≫ Cloudforms Management Engine Version >= 5.8 < 5.8.1.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.33%	0.675

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
secalert@redhat.com	4.3	2.8	1.4	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N