{"id":"CVE-2017-15123","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-15123","generatedAt":"2026-10-29T01:54:25.776Z","title":"An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines.","description":"A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines.","published":"2019-06-12T14:29:00.000Z","lastModified":"2026-06-17T01:07:17.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-306"],"affected":["redhat/cloudforms management engine"],"epss":{"score":0.0143,"percentile":0.72888,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/108690","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123","tags":["Issue Tracking","Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"https://hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/108690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123","tags":["Issue Tracking","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-15123","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}