CVE-2014-8183CWE-284

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources

High · published August 1, 2019

CVSS v3.0
7.4
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00749 · 54.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-08-01T13:38Z
EPSS history
Timeline
  • 01 AUG 13:38Z
    It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources
    cvelistv5