Unrated

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. U...

CVE-2016-7077 First seen on SecPulse Sep 11, 2018

Original description The description as published by the source.

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory securityfocus.com
advisory theforeman.org
report bugzilla.redhat.com
report projects.theforeman.org

Key facts

Severity: Unrated
Published: Sep 11, 2018
First seen on SecPulse: Sep 11, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47