Privilege Escalation Vulnerability in CloudForms Management Engine by Red Hat

CVE-2017-7530

Summary

A vulnerability exists in CloudForms Management Engine prior to versions 5.7.3 and 5.8.1 that allows API users to bypass privilege checks, enabling them to invoke arbitrary methods and perform actions they are not authorized to execute, such as destroying virtual machines. This flaw can lead to significant security implications if exploited by malicious actors.

References