Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-2662

Опубликовано: 22 авг. 2018
Источник: debian

Описание

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
foremanitppackage

Связанные уязвимости

CVSS3: 4.3
redhat
почти 9 лет назад

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

CVSS3: 4.3
nvd
больше 7 лет назад

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

CVSS3: 4.3
github
больше 3 лет назад

katello Improper Privilege Management vulnerability