The flaw resides in the Foreman package used by Red Hat Satellite 6. The API retrieves a permission filter by ID but ignores the caller's search limit, allowing a user who can delete filters for one role to delete filters belonging to other unlocked roles. This results in those roles losing the permissions that the removed filters had granted. The weakness is an authorization bypass identified as CWE‑639.

This vulnerability affects Red Hat Satellite 6. Systems running version 6 of Satellite that include the API for permission filtering are susceptible. No other vendor or product is currently listed as impacted.

The CVSS score of 6.5 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting exploitation is not widely reported or actively used. Attackers must already possess permission to delete filters for at least one role, so the threat is limited to users with those privileges. The risk can be mitigated by applying the vendor’s patch, removing the delete‑permission from delegated roles, and enabling audit logs to detect unauthorized deletions.