CWE Code: 863
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Incorrect Authorization
Summary: a logic error in valid_role() in cloudforms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. this would allow an attacker with tenant administration access to elevate privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-07-27
Last Modified Date: 2019-10-09