| Package | Affected versions | Patched versions |
|---|---|---|
| cloudforms | = 4.2= 4.5 | |
| cloudforms management engine | ≥ 5.6, < 5.6.3.0≥ 5.7, < 5.7.3.1≥ 5.8, < 5.8.1.2 | 5.6.3.05.7.3.15.8.1.2 |
A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free