{"id":"CVE-2017-2632","aliases":["EUVD-2017-11793","GHSA-859c-mmxf-c34p","RHSA-2017:0320"],"status":"published","title":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant...","description":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.","severity":{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01453,"percentile":0.73601,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285","CWE-863"],"published":"2018-07-27T19:00:00Z","modified":"2026-07-01T10:01:44Z","affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.1.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.1.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.1.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.1.3-1.el7cf"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.1.3-1.el7cf"}]}],"bundled":2}],"products":[{"vendor":"red hat","product":"cfme"},{"vendor":"redhat","product":"cloudforms"},{"vendor":"redhat","product":"cloudforms_management_engine"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2632","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96478","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0320.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2632","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-859c-mmxf-c34p"},{"url":"https://access.redhat.com/errata/RHSA-2017:0320","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1408278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414550","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1423031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1423033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1424260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1424275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1424977","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0320.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2632","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-2632","description":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.","status":"published","published":"2018-07-27T19:00:00Z","modified":"2024-08-05T14:02:06.842Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:33:15.201133Z"}],"euvd":[{"id":"EUVD-2017-11793","description":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.","status":"published","published":"2018-07-27T19:00:00Z","modified":"2024-08-05T14:02:06Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T02:39:20.499267Z"}],"ghsa":[{"id":"GHSA-859c-mmxf-c34p","title":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant...","description":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.","status":"published","published":"2022-05-13T01:36:52Z","modified":"2023-02-01T05:09:03Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:50:54.417127Z"}],"nvd":[{"id":"CVE-2017-2632","description":"A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.","status":"published","published":"2018-07-27T19:29:00.487Z","modified":"2026-06-17T01:16:33.1Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-285","CWE-863"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"RHSA-2017:0320","title":"Red Hat Security Advisory: CFME 5.7.1 bug fixes and enhancement update","status":"published","published":"2024-09-15T23:52:45Z","modified":"2026-07-01T10:01:44Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"}]}}