Privilege Escalation Vulnerability in CloudForms Management Engine by Red Hat

CVE-2017-2664

What is CVE-2017-2664?

CloudForms Management Engine prior to version 5.7.3 and versions 5.8.0 prior to 5.8.1 are susceptible to a privilege escalation vulnerability due to the absence of Role-Based Access Control (RBAC) on specific methods within the Rails application layer. Malicious actors with access to the application can exploit these methods to gain elevated privileges, potentially compromising sensitive data and operations. This weakness underscores the importance of implementing robust access controls within enterprise applications.

References