CVE-2017-2664

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
Red Hat	CloudForms	5.7.3; 5.8.1

References

http://www.securityfocus.com/bid/100148Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1758Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:3484Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2664Issue Tracking, Vendor Advisory
http://www.securityfocus.com/bid/100148Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1758Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:3484Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2664Issue Tracking, Vendor Advisory

Timeline

Published: Jul 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-26657.0The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.CVE-2017-26666.5It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conj CVE-2017-26678.1Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it CVE-2017-26686.5389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled.CVE-2017-26697.5Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the use CVE-2017-26707.5It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effec CVE-2017-26715.5The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cann CVE-2017-26728.8A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log CVE-2017-26737.2An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated feder CVE-2017-26745.4JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of s CVE-2017-26757.8Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is r CVE-2017-26806.5Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment