Non évaluée

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. U...

CVE-2016-7077 Première détection SecPulse Sep 11, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory securityfocus.com
advisory theforeman.org
report bugzilla.redhat.com
report projects.theforeman.org

Faits clés

Gravité: Non évaluée
Publication: Sep 11, 2018
Première détection SecPulse: Sep 11, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47