TI-2016-06078 CVE-2016-7071 · GHSA-82ph-q482-5fhg
Improper authorization in Red Hat CFME
Priority MEDIUM 42
It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users.
RHSA-2016:2091
CFME 5.6.2.2 security, and bug fix update
Released 2016-10-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.6 cfme-5.6.2.2-1.el7cf, cfme-appliance-5.6.2.2-1.el7cf, cfme-gemset-5.6.2.2-1.el7cf