Vulnetix
Try Vulnetix Request Demo
CVE-2014-8183 PUBLISHED CVSS 7.400000095367432 HIGH

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.

EPSS 0.15% · 35.9th percentile

Risk Scores

CVSS v3.0
7.400000095367432
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
EPSS Score
0.15%
35.9th percentile

Affected Products

VendorProductVersions
redhatsatellite6.0
theforemanforeman1.x.x before 1.15.6, 1.0

Timeline

References

Open in Interactive Console →