It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2019-08-01T13:38:05

Updated: 2024-08-06T13:10:51.156Z

Reserved: 2014-10-10T00:00:00

Link: CVE-2014-8183

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-08-01T14:15:10.847

Modified: 2024-11-21T02:18:43.823

Link: CVE-2014-8183

cve-icon Redhat

Severity : Moderate

Publid Date: 2017-08-14T00:00:00Z

Links: CVE-2014-8183 - Bugzilla