| Package | Affected versions | Patched versions |
|---|---|---|
| cloudforms | = 4.2 | |
| cloudforms management engine | < 5.7.1.3 | 5.7.1.3 |
A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free