CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the check_privileges method in vmdb/app/controllers/application_controller.rb in manageiq, as used in red hat cloudforms management engine (cfme), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper rbac checking, related to the rbac_user_edit action.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-01-11
Last Modified Date: 2018-12-18