Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-8553

Опубликовано: 31 окт. 2024
Источник: nvd
CVSS3: 6.3
EPSS Низкий

Описание

A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.

EPSS

Процентиль: 30%
0.00109
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.3
redhat
около 1 года назад

A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.

CVSS3: 6.3
debian
около 1 года назад

A vulnerability was found in Foreman's loader macros introduced with r ...

CVSS3: 6.3
github
около 1 года назад

A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.

EPSS

Процентиль: 30%
0.00109
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-200