{"id":"CVE-2017-12191","aliases":["EUVD-2017-3766","GHSA-cfmg-g9hg-m3g2","RHSA-2018:0374"],"status":"published","title":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared...","description":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.","severity":{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00877,"percentile":0.59276,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284","CWE-613"],"published":"2018-02-28T13:00:00Z","modified":"2026-06-27T10:05:22Z","fixes":[{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible","fixed_in":["0:2.4.3.0-1.el7ae"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-server","fixed_in":["0:3.1.5-3.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-setup","fixed_in":["0:3.1.5-3.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme","fixed_in":["0:5.8.3.4-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance","fixed_in":["0:5.8.3.4-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance-debuginfo","fixed_in":["0:5.8.3.4-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-debuginfo","fixed_in":["0:5.8.3.4-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-gemset","fixed_in":["0:5.8.3.4-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-contrib","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-debuginfo","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-devel","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-docs","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-libs","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-plperl","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-plpython","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-pltcl","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-server","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-test","fixed_in":["0:9.4.15-3PGDG.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-crypto","fixed_in":["0:2.6.1-16.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-crypto-debuginfo","fixed_in":["0:2.6.1-16.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-jmespath","fixed_in":["0:0.9.0-4.el7ae"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-paramiko","fixed_in":["0:2.1.1-2.el7ae"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-paramiko-doc","fixed_in":["0:2.1.1-2.el7ae"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python2-crypto","fixed_in":["0:2.6.1-16.el7at"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python2-jmespath","fixed_in":["0:0.9.0-4.el7ae"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3.0-1.el7ae"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-3.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"ansible-tower-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-3.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.3.4-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.3.4-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.3.4-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.3.4-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.3.4-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"postgresql94-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.15-3PGDG.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-crypto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-jmespath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-4.el7ae"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-2.el7ae"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python-paramiko-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-2.el7ae"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python2-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7at"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.8::el7","package":"python2-jmespath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-4.el7ae"}]}]}],"products":[{"vendor":"[unknown]","product":"cloudforms"},{"vendor":"red hat, inc.","product":"cloudforms"},{"vendor":"redhat","product":"cloudforms"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:0374","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500517","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12191","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cfmg-g9hg-m3g2"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1479402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1479939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1479940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1481378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1481446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1504199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1504775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1521036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1522951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1524646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1527676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1530653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1530708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1530717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1536052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1536672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1541072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1543121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1543150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1543172","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0374.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12191","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-12191","description":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.","status":"published","published":"2018-02-28T13:00:00Z","modified":"2024-08-05T18:28:16.718Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-3766","description":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.","status":"published","published":"2018-02-28T13:00:00Z","modified":"2024-08-05T18:28:16Z","updated_at":"2026-11-03T02:23:22.23661Z"}],"ghsa":[{"id":"GHSA-cfmg-g9hg-m3g2","title":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared...","description":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.","status":"published","published":"2022-05-13T01:38:11Z","modified":"2023-02-13T00:31:05Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-284","CWE-613"],"updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2017-12191","description":"A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.","status":"published","published":"2018-02-28T13:29:00.21Z","modified":"2026-06-17T01:02:52.367Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-284","CWE-613"],"updated_at":"2026-11-02T14:04:15.877386Z"}],"osv":[{"id":"RHSA-2018:0374","title":"Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:50:22Z","modified":"2026-06-27T10:05:22Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"}]}}