Логотип exploitDog
bind:CVE-2017-7497
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-7497

Количество 3

Количество 3

redhat логотип

CVE-2017-7497

почти 9 лет назад

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.1
EPSS: Низкий
nvd логотип

CVE-2017-7497

больше 7 лет назад

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.1
EPSS: Низкий
github логотип

GHSA-97vg-m3qf-f423

больше 3 лет назад

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2017-7497

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.1
0%
Низкий
почти 9 лет назад
nvd логотип
CVE-2017-7497

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.1
0%
Низкий
больше 7 лет назад
github логотип
GHSA-97vg-m3qf-f423

The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.

CVSS3: 4.3
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу