Read the docs
TI-2017-01903 Aliases CVE-2017-2653GHSA-xfgx-c33h-jf9f

Improper input validation in Red Hat CloudForms

Priority LOW 32CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could allow an attacker to bypass the protect_from_forgery XSRF protection causing the routes to be used. This attack would require additional cross-site scripting or similar attacks in order to execute.

Why it matters now

EPSS 0.01387 72nd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatCloudForms5.7.2.1—No fix listedCNA
  • CloudForms VendorRed Hat Affected 5.7.2.1 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*before 5.7.2.1VulnerableRed Hat
cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*4.2VulnerableRed Hat
  • cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:* Versions before 5.7.2.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Red Hat

Remediation

Red Hat 1 advisory

  • RHSA-2017:0898 Released 2017-04-12 · Red Hat rating Moderate
    cfme, cfme-appliance, and cfme-gemset security, bug fix, and enhancement update
    • CloudForms Management Engine 5.7 cfme-5.7.2.1-1.el7cf, cfme-appliance-5.7.2.1-1.el7cf, cfme-gemset-5.7.2.1-1.el7cf

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5.7Fixed RHSA-2017:0898

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2653
  2. 2026-10-03 Alias added: GHSA-xfgx-c33h-jf9f

References

Advisory 2

  • TI-2019-03828 Path traversal in Rails https://github.com/rails/rails KEVCVSS 3.1HIGH 7.5
  • TI-2017-08592 The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4… CVSS 3.0HIGH 8.8
  • TI-2019-08480 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles… CVSS 3.1MEDIUM 6.1
  • TI-2018-05593 transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before… CVSS 3.1CRITICAL 9.8
  • TI-2018-02756 Path traversal in HackerOne Sprockets CVSS 3.0HIGH 7.5
  • TI-2018-00978 Improper input validation in postgresql CVSS 3.1HIGH 8.8
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences