CVE-2014-8183

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.

Score

CVSS 3.1 7.4 High

Status

Modified - secalert@redhat.com

Published

2019-08-01

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Satellite (Redhat)
• Foreman (Theforeman)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8183