CVE-2018-14666CWE-285

An improper authorization flaw was found in the Smart Class feature of Foreman

Medium · published January 22, 2019

CVSS v3.0
6.8
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01047 · 63.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2019-01-22T15:00Z
EPSS history
Timeline
  • 22 JAN 15:00Z
    An improper authorization flaw was found in the Smart Class feature of Foreman
    cvelistv5