6.3
Moyenne
CVE-2024-8553 A vulnerability was found in Foreman's loader macros introduced with report templates
Description
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.15 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.16 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.16 for RHEL 9 | Versions non publiées |
Références
- RHSA-2024:8717 access.redhat.com
- RHSA-2024:8718 access.redhat.com
- RHSA-2024:8719 access.redhat.com
- RHSA-2024:8906 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2312524 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Satellite 6.13 for RHEL 8
Les 6 CVE de Red Hat Satellite 6.13 for RHEL 8 →
CVE-2024-7923
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…
9.8
Critique
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…
9.8
Critique
CVE-2023-4886
A sensitive information exposure vulnerability was found in foreman
6.7
Moyenne
CVE-2023-0118
An arbitrary code execution flaw was found in Foreman
9.1
Critique