Medium severity4.3NVD Advisory· Published Sep 11, 2018· Updated Jun 17, 2026
CVE-2016-7047
CVE-2016-7047
Description
A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*
- (no CPE)range: <5.6.3.0, <5.7.3.1, <5.8.1.2
- cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*Range: >=5.6,<5.6.3.0
- Red Hat/cfmev5Range: 5.8.1.2
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/99329nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2017:1601nvdVendor Advisory
- access.redhat.com/errata/RHSA-2017:1758nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.