CVE-2017-7497
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use thi…
Published: 2018-07-27 · CVSS: 4.1 · CVSS 3.0
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7