CVE-2017-2664 Missing authorization in CloudForms
Attackers can escalate privileges by accessing unprotected methods in the CloudForms Rails application due to missing RBAC controls.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-2664?
CVE-2017-2664 is a medium-severity missing authorization vulnerability in Red Hat CloudForms, published on 26 Jul 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges.
Weakness: CWE-284
Which versions are affected by CVE-2017-2664?
It affects 2 products.
Linux distribution packages (8)
cfme Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:5.7.4.2-1.el7cf |
cfme-appliance Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:5.7.4.2-1.el7cf |
cfme-appliance-debuginfo Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:5.7.4.2-1.el7cf |
cfme-debuginfo Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:5.7.4.2-1.el7cf |
cfme-gemset Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:5.7.4.2-1.el7cf |
rh-ruby23-rubygem-nokogiri Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:1.8.1-2.el7cf |
rh-ruby23-rubygem-nokogiri-debuginfo Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:1.8.1-2.el7cf |
rh-ruby23-rubygem-nokogiri-doc Red Hat:cloudforms_managementengine:5.7::el7 | All versions | 0:1.8.1-2.el7cf |
Products include Redhat Cloudforms, Redhat Cloudforms Management Engine.
How do I fix CVE-2017-2664?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2017-2664 being exploited?
There is no known exploitation of CVE-2017-2664 in the wild and no public exploit code.
Other vulnerabilities in Red Hat CloudForms
Sources
Also known as GHSA-rc49-fxf8-jgg2, RHSA-2017:3484.