Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5135

Опубликовано: 01 июл. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
Версия от 6.16 (включая) до 6.16.10 (исключая)

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
Версия от 6.17 (включая) до 6.17.9 (исключая)
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
Версия от 6.18 (включая) до 6.18.7 (исключая)
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
Версия от 6.19 (включая) до 6.19.2 (исключая)
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*
Версия до 3.18.2 (исключая)
cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*
Версия от 3.19.0 (включая) до 3.19.1 (исключая)

EPSS

Процентиль: 18%
0.00266
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 6.5
redhat
4 месяца назад

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.

CVSS3: 6.5
debian
около 1 месяца назад

A flaw was found in Foreman. This broken access control vulnerability ...

CVSS3: 6.5
github
около 1 месяца назад

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.

EPSS

Процентиль: 18%
0.00266
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639