{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-12-15T00:00:00", "descriptions": [{"lang": "en", "value": "Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-04-11T20:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://projects.theforeman.org/issues/11579"}, {"name": "RHSA-2015:2622", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2015:2622"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T06:41:08.399Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://projects.theforeman.org/issues/11579"}, {"name": "RHSA-2015:2622", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2015:2622"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-5233", "datePublished": "2016-04-11T21:00:00", "dateReserved": "2015-07-01T00:00:00", "dateUpdated": "2024-08-06T06:41:08.399Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "matchCriteriaId": "278FCFFF-B5C7-4817-9935-6D3BCE017661", "versionEndIncluding": "1.8.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "F1825F24-09E5-4AC4-845B-C9D113372B05", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:satellite:6.1:*:*:*:*:*:*:*", "matchCriteriaId": "0697265D-69BB-4AB2-963A-A495B7D66EB7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs."}, {"lang": "es", "value": "Foreman en versiones anteriores a 1.8.4 y 1.9.x en versiones anteriores a 1.9.1 no aplica correctamente los permisos view_hosts, lo que permite (1) a usuarios remotos autenticados con el permiso view_reports leer informes desde hosts arbitrarios o (2) a usuarios remotos autenticados con el permiso destroy_reports borrar informes desde hosts arbitrarios a trav\u00e9s del acceso directo a (a) las p\u00e1ginas show/delete del informe individual o (b) APIs."}], "id": "CVE-2015-5233", "lastModified": "2023-02-13T00:52:25.947", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-04-11T21:59:01.913", "references": [{"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://projects.theforeman.org/issues/11579"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2015:2622"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "foreman-0:1.7.2.49-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "foreman-discovery-image-0:3.0.5-3", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "foreman-proxy-0:1.7.2.7-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "gofer-0:2.6.8-1.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "katello-agent-0:2.2.6-1.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "katello-installer-base-0:2.3.22-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "python-nectar-0:1.3.4-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "python-qpid-0:0.30-7.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "qpid-dispatch-0:0.4-11.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "qpid-proton-0:0.9-11.el7", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "ruby193-rubygem-foreman_bootdisk-0:4.0.2.14-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "ruby193-rubygem-foreman_discovery-0:2.0.0.23-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "ruby193-rubygem-foreman-redhat_access-0:0.2.4-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "ruby193-rubygem-katello-0:2.2.0.77-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "ruby193-rubygem-redhat_access_lib-0:0.0.6-1.el6_6sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "rubygem-hammer_cli_foreman_docker-0:0.0.3.10-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "rubygem-newt-0:0.9.6-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "rubygem-smart_proxy_discovery-0:1.0.3-2.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite:6.1::el6", "package": "rubygem-smart_proxy_discovery_image-0:1.0.5-3.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "foreman-0:1.7.2.49-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "foreman-discovery-image-0:3.0.5-3", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "foreman-proxy-0:1.7.2.7-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "gofer-0:2.6.8-1.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "katello-agent-0:2.2.6-1.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "katello-installer-base-0:2.3.22-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "python-nectar-0:1.3.4-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "python-qpid-0:0.30-7.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "qpid-dispatch-0:0.4-11.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "qpid-proton-0:0.9-11.el7", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "ruby193-rubygem-foreman_bootdisk-0:4.0.2.14-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "ruby193-rubygem-foreman_discovery-0:2.0.0.23-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "ruby193-rubygem-foreman-redhat_access-0:0.2.4-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "ruby193-rubygem-katello-0:2.2.0.77-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "ruby193-rubygem-redhat_access_lib-0:0.0.6-1.el6_6sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "rubygem-hammer_cli_foreman_docker-0:0.0.3.10-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "rubygem-newt-0:0.9.6-1.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "rubygem-smart_proxy_discovery-0:1.0.3-2.el7sat", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}, {"advisory": "RHSA-2015:2622", "cpe": "cpe:/a:redhat:satellite_capsule:6.1::el6", "package": "rubygem-smart_proxy_discovery_image-0:1.0.5-3.el6", "product_name": "Red Hat Satellite 6.1", "release_date": "2015-12-15T00:00:00Z"}], "bugzilla": {"description": "foreman: reports show/destroy not restricted by host authorization", "id": "1262443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1262443"}, "csaw": false, "cvss": {"cvss_base_score": "5.5", "cvss_scoring_vector": "AV:N/AC:L/Au:S/C:P/I:N/A:P", "status": "verified"}, "cwe": "CWE-284", "details": ["Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs.", "A flaw was discovered where Satellite failed to properly enforce permissions on the show and delete actions for reports. An authenticated user with show or delete report permissions could use this flaw to view or delete any reports held in Foreman."], "name": "CVE-2015-5233", "package_state": [{"cpe": "cpe:/a:redhat:openstack-installer:5", "fix_state": "Will not fix", "package_name": "foreman", "product_name": "OpenStack Foreman"}, {"cpe": "cpe:/a:redhat:openstack-installer:6", "fix_state": "Will not fix", "package_name": "foreman", "product_name": "Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer"}], "public_date": "2015-08-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2015-5233\nhttps://nvd.nist.gov/vuln/detail/CVE-2015-5233"], "threat_severity": "Moderate"}