Medium severity5.3NVD Advisory· Published Jun 12, 2019· Updated Jun 17, 2026

CVE-2017-15123

Description

A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Cloudforms Management Engine
cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*
Range: >=5.8,<=5.10
Cloudforms/Cloudformsllm-fuzzy
Range: 5.8 - 5.10
Red Hat/Cloudformsv5
Range: 5.8 - 5.10

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
www.securityfocus.com/bid/108690nvd
hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000