An incorrect authorization flaw was discovered in the Foreman API used by Red Hat Satellite 6. The domain and subnet interface endpoints only verify that callers hold general host‑view permissions without applying the search‑limit filter tied to that permission. As a result, the API can return interface records for hosts that the user is not authorized to view, exposing sensitive network details. If the same user also possesses edit rights on legitimate hosts, they can submit changes to those interfaces, thereby modifying unrelated host interfaces. This flaw leads to both confidentiality leakage and integrity violation for affected host configurations.

The vulnerability affects Red Hat Satellite 6 installed via the Foreman component. No specific sub‑versions are listed; the issue applies to any installation of Satellite 6 using the affected Foreman API endpoints.

With a CVSS score of 5.4, the exploitability is moderate. The EPSS score is not available, and the vulnerability is not listed in the CISA Known Exploit Vulnerabilities catalog. The likely attack vector is a network API request to the domain or subnet interface endpoints from an authenticated low‑privileged user who already has host‑view permission on at least one host and domain or subnet sharing with other hosts. The attacker can obtain a list of interfaces beyond their authorization scope and potentially alter them, thereby compromising configuration integrity. The impact is limited to systems where such misconfigured permissions exist, but the potential for widespread confusion or misconfiguration exists if attackers manipulate interfaces across multiple hosts.