The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=1112813http://rhn.redhat.com/errata/RHSA-2014-1194.html