CVE-2016-7047CWE-200

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2

Medium · published September 11, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01334 · 70.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-09-11T13:00Z
EPSS history
Timeline
  • 11 SEP 13:00Z
    A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2
    cvelistv5