The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbac_user_edit action.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1067623 | Issue Tracking Third Party Advisory |
https://github.com/ManageIQ/manageiq/issues/1581 | Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2018-01-11T16:00:00
Updated: 2018-01-11T15:57:02
Reserved: 2013-12-03T00:00:00
Link: CVE-2014-0087
JSON object: View
NVD Information
Status : Modified
Published: 2018-01-11T16:29:00.297
Modified: 2023-02-13T00:31:50.180
Link: CVE-2014-0087
JSON object: View
Redhat Information
No data.
CWE