Red Hat CloudForms Management Engine CVE-2017-7530 Privilege Escalation Vulnerability

Bugtraq ID:	100151
Class:	Design Error
CVE:	CVE-2017-7530
Remote:	Yes
Local:	No
Published:	Aug 02 2017 12:00AM
Updated:	Aug 02 2017 12:00AM
Credit:	Tim Wade from Red Hat.
Vulnerable:	Redhat CloudForms Management Engine 0
Not Vulnerable:

Red Hat CloudForms Management Engine CVE-2017-7530 Privilege Escalation Vulnerability

Red Hat CloudForms Management Engine is prone to a privilege-escalation vulnerability.

An attacker can leverage this issue to gain elevated privileges. Failed exploit attempts will result in a denial-of-service condition.

Red Hat CloudForms Management Engine CVE-2017-7530 Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at:maitto:[email protected].

Red Hat CloudForms Management Engine CVE-2017-7530 Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Red Hat CloudForms Management Engine CVE-2017-7530 Privilege Escalation Vulnerability

References:

• Bug 1465448 - (CVE-2017-7530) CVE-2017-7530 cfme: Execution of arbitrary methods (Red Hat)
  
• CVE-2017-7530 (Red Hat)
  
• Red Hat CloudForms Management Engine Homepage (Red Hat)
  
• RHSA-2017:1758 - Security Advisory (Red Hat)