← CVE Intelligence

CVE-2017-7540

Red Hat, Inc. / rubygem-safemode PUBLISHED

Description (CNA)

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

Affected (CNA)

Vendor / productVersions
Red Hat, Inc. / rubygem-safemodeaffected 1.3.2 and earlier

CWE

CWE-184

References

ADP enrichment

CVE

No English description supplied.