Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fqh-mgxh-pgrj

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

EPSS

Процентиль: 57%
0.00353
Низкий

7.2 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.8
redhat
около 7 лет назад

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

CVSS3: 6.8
nvd
около 7 лет назад

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

CVSS3: 6.8
debian
около 7 лет назад

An improper authorization flaw was found in the Smart Class feature of ...

CVSS3: 7.2
fstec
больше 7 лет назад

Уязвимость реализации класса Smart Class программного средства для управления системами Red Hat Satellite и приложения для управления, настройки и мониторинга сервера Foreman, позволяющая нарушителю изменить конфигурационные файлы

EPSS

Процентиль: 57%
0.00353
Низкий

7.2 High

CVSS3

Дефекты

CWE-863