Description (CNA)
It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| theforeman / foreman | affected 1.x.x before 1.15.6 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.