CVE-2017-7497

—

CVSS 3.0

4.3 medium

EPSS

<1%p60

Published

Jul 27, 2018 (Jul 27, 2018)

Modified

Jun 17, 2026

Description

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

Vendors: redhat
Products: cloudforms management engine
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.